LazyMesh

LazyMesh Sistema de enrutamiento de malla que soporta el uso de un proxy OpenDHT como backend, para que los nodos puedan comunicarse directamente a través de internet. Muy temprano pre alfa, prueba de concepto, podría no funcionar realmente, etc. Está pensado tanto para casos de uso de hobby/HAM,...

PYSEC-2026-2618 malla: Stored XSS via Meshtastic node names in multiple frontend pages

Node names longname, shortname received via MQTT are stored in SQLite without sanitization and rendered into the DOM without escaping. Any participant on a public Meshtastic MQTT broker can set a malicious node name that executes JavaScript in the browser of every Malla dashboard visitor. Affecte...

malla: Stored XSS via Meshtastic node names in multiple frontend pages

Node names longname, shortname received via MQTT are stored in SQLite without sanitization and rendered into the DOM without escaping. Any participant on a public Meshtastic MQTT broker can set a malicious node name that executes JavaScript in the browser of every Malla dashboard visitor. Affecte...

PT-2026-46117

Name of the Vulnerable Software and Affected Versions Malla affected versions not specified Description Node names received via MQTT are stored in SQLite without sanitization and rendered into the Document Object Model DOM without escaping. This allows unauthenticated remote attackers to set...

PT-2024-31388 · Unknown · Meshtastic

Name of the Vulnerable Software and Affected Versions: Meshtastic device firmware versions prior to 2.4.1 Description: The Meshtastic device firmware is subject to a denial of service vulnerability in MQTT handling. This issue is fixed in version 2.4.1 of the Meshtastic firmware and on the...