Skip to content
OpenAdvisories

Package · npm

@openc3/tool-common

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2024-47529

    OpenC3 COSMOS uses clear text storage of password/token (`GHSL-2024-129`)

    OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. OpenC3 COSMOS stores the password of a user unencrypted in the LocalStorage of a web browser. This makes the user password susceptible to e…

    OpenC3 cosmos openc3 openc3 npm PyPI RubyGems
  • Medium 5.1
    CVE-2024-43795

    OpenC3 COSMOS vulnerable to cross-site scripting in Login functionality (`GHSL-2024-128`)

    OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. The login functionality contains a reflected cross-site scripting (XSS) vulnerability. This vulnerability is fixed in 5.19.0. Note: This CV…

    OpenC3 cosmos openc3 openc3 npm PyPI RubyGems