Skip to content
OpenAdvisories

Package · Go

github.com/alexandre-daubois/ember

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2026-54162

    Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUI

    Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row formatters pass Caddy access-log fields, particularly the request URI, through the `fitCellLeft` render helper without neutralizing terminal…

    alexandre-daubois ember github.com/alexandre-daubois/ember Go