CVE-2022-29643

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

iobroker.yahka (>=0.5.4 <=0.7.1) potentially affected by CVE-2018-13797 via macaddress (=0.2.8)

macaddress NPM version =0.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on macaddress and may be impacted: - iobroker.yahka =0.5.4, =0.7.1 Source cves: CVE-2018-13797 Source advisory: OSV:GHSA-PP57-MQMH-44H7...

GHSA-PP57-MQMH-44H7 Command Injection in macaddress

All versions of macaddress are vulnerable to command injection. For this vulnerability to be exploited an attacker needs to control the iface argument to the one method. Recommendation Update to version 0.2.9 or later...