Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-c7hr-448w-65px
  • npm/meshcentral
MeshCentral has unsanitized data fields 18 Aug
  • Fix available
  • Severity - 8.3 (High)
CVE-2026-66420
  • github.com/ylianst/meshcentral
MeshCentral Cross-Site WebSocket Hijacking via Origin Validation Bypass on Self-Signed Certificate Deployments 30 Jul
  • Fix available
  • Severity - 8.6 (High)
GHSA-cp68-qrhr-g9h8
  • npm/meshcentral
MeshCentral cross-site websocket hijacking (CSWSH) vulnerability 21 Feb 2024
  • Fix available
  • Severity - 8.3 (High)
CVE-2024-26135
  • github.com/ylianst/meshcentral
MeshCentral cross-site websocket hijacking (CSWSH) vulnerability 20 Feb 2024
  • Fix available
  • Severity - 8.3 (High)
GHSA-v269-rrr6-cx6r
  • npm/meshcentral
Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm. 02 Feb 2024
  • No fix available
  • Severity - 7.5 (High)
CVE-2023-51838
  • github.com/ylianst/meshcentral
See record for full details 02 Feb 2024
  • No fix available
  • Severity - 7.5 (High)
GHSA-8xw6-9h78-c89j
  • npm/meshcentral
Ylianst MeshCentral Missing SSL Certificate Validation 30 Jan 2024
  • No fix available
  • Severity - 9.8 (Critical)
CVE-2023-51837
  • github.com/ylianst/meshcentral
See record for full details 30 Jan 2024
  • No fix available
  • Severity - 9.8 (Critical)
GHSA-wpxw-5xfm-x22v
  • npm/meshcentral
MeshCentral algorithm-downgrade issue 29 Jan 2024
  • Fix available
  • Severity - 7.5 (High)
CVE-2023-51842
  • github.com/ylianst/meshcentral
See record for full details 29 Jan 2024
  • No fix available
  • Severity - 7.5 (High)