Skip to content
OpenAdvisories

Package · npm

magicmirror

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.2
    CVE-2026-42281 Public exploit Scanner template

    MagicMirror²: Unauthenticated SSRF via /cors endpoint

    MagicMirror² is an open source modular smart mirror platform. Prior to 2.36.0, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability in the /cors endpoint allows any remote attacker to force the MagicMirror² server to perform arbitrary HTTP requ…

    MagicMirrorOrg MagicMirror magicmirror npm