Skip to content
OpenAdvisories

Vendor

jpettitt

1 known vulnerabilities.

Products

meshcore-card 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-45323

    MeshCore Card: XSS vulnerability through meshcore node name

    MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect (repeated) radio range to execute arbitrary javascript in th…

    jpettitt meshcore-card