Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/21 9:17 p.m.14 views

CVE-2026-43980 Malla: Stored XSS via Meshtastic node names in multiple frontend pages

Malla is a web analyzer for Meshtastic networks based on MQTT data. Prior to commit 4086e2b5f61615a813b70b25bc76095083552135, code names longname, shortname received via MQTT are stored in SQLite without sanitization and rendered into the DOM without escaping. Any participant on a public Meshtast...

6.3CVSS5.6AI score
SaveExploits0References5
Rows per page
Query Builder