Skip to main content
cve.nowby Sazabi
← npm
npmPackage

meshcentral

4 known vulnerabilities (1 critical, 3 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 critical, 3 high
Registry
npm

Advisories 4

  • MeshCentral cross-site websocket hijacking (CSWSH) vulnerability

    Affected: fixed in 1.1.21.

  • Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.

    Affected: through 1.1.16.

  • CVE-2023-51837Critical 9.8

    Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation.

    Affected: through 1.1.16.

  • An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16.

    Affected: fixed in 1.1.17.