Alexandre Daubois Ember input validation error vulnerability

🗓️ 28 Oct 2026 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd🔗 www.cnnvd.org.cn👁 6 Views

Input validation error in Alexandre Daubois Ember TUI line formatter allows spoofing.

Reporter	Title	Published	Views	Family All 126
Circl	CVE-2026-54162	28 Oct 202619:50	–	circl
CVE	CVE-2026-54162	28 Oct 202619:44	–	cve
Cvelist	CVE-2026-54162 Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUI	28 Oct 202619:44	–	cvelist
EUVD	EUVD-2026-112411	28 Oct 202619:44	–	euvd
Github Security Blog	Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI	20 Aug 202618:36	–	github
Mend	CVE-2026-54162	28 Oct 202619:44	–	mend
NVD	CVE-2026-54162	28 Oct 202620:18	–	nvd
osv_cve	CVE-2026-54162 Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUI	28 Oct 202619:44	–	osv_cve
osv_ghsa	GHSA-X3G7-QRWC-F6C5 Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI	20 Aug 202618:36	–	osv_ghsa
osv_go	GO-2026-6270 Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI in github.com/alexandre-daubois/ember	25 Aug 202619:43	–	osv_go

Source	Link
github	www.github.com/alexandre-daubois/ember/security/advisories/GHSA-x3g7-qrwc-f6c5
github	www.github.com/alexandre-daubois/ember/commit/fcb7160e58dba58d6f9b5033cc312fdedc8c9f6b
github	www.github.com/alexandre-daubois/ember/releases/tag/v1.4.2

30 Oct 2026 15:29Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.14.7

EPSS0.00251

SSVC

Alexandre Daubois Ember TUI line formatter input validation error dashboard spoofing clipboard hijacking window title spoofing