Skip to content
OpenAdvisories

Package · npm

wetty

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.6
    CVE-2026-49864

    wetty vulnerable to DOM XSS via file-download filename

    wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolates it raw into a Toastify HTML string (`escapeMarkup: false`). Any output the vi…

    butlerx wetty wetty npm