Skip to content
OpenAdvisories

Package · npm

@openc3/vue-common

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-77394

    OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widget

    OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.0.6 until 7.3.0, an authenticated actor with system_set permission can store a shared screen through POST /openc3-api/screen whose B…

    OpenC3 cosmos @openc3/vue-common npm