LazyMesh

LazyMesh Система mesh-маршрутизации, которая поддерживает использование прокси OpenDHT в качестве бэкенда, благодаря чему узлы могут связываться напрямую через интернет. Очень ранняя пре-альфа, концепт-прототип, может не работать на деле и т. д. Она предназначена как для любительских/HAM-сценарие...

PYSEC-2026-2618 malla: Stored XSS via Meshtastic node names in multiple frontend pages

Node names longname, shortname received via MQTT are stored in SQLite without sanitization and rendered into the DOM without escaping. Any participant on a public Meshtastic MQTT broker can set a malicious node name that executes JavaScript in the browser of every Malla dashboard visitor. Affecte...

malla: Stored XSS via Meshtastic node names in multiple frontend pages

Node names longname, shortname received via MQTT are stored in SQLite without sanitization and rendered into the DOM without escaping. Any participant on a public Meshtastic MQTT broker can set a malicious node name that executes JavaScript in the browser of every Malla dashboard visitor. Affecte...

PT-2026-46117

Name of the Vulnerable Software and Affected Versions Malla affected versions not specified Description Node names received via MQTT are stored in SQLite without sanitization and rendered into the Document Object Model DOM without escaping. This allows unauthenticated remote attackers to set...

PT-2024-31388

Name of the Vulnerable Software and Affected Versions Meshtastic device firmware versions prior to 2.4.1 Description The Meshtastic device firmware is subject to a denial of service vulnerability in MQTT handling. This issue is fixed in version 2.4.1 of the Meshtastic firmware and on the Meshtast...