jpettitt/meshcore-card

Releases10

Frequency5 days 23 hours

Last Release about 1 month ago

Stars18

MeshCore Lovelace card for Home Assistant

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-45323 ↗	May 28, 2026Thursday, 28 May 2026, 18:16	9.6 CRITICAL	—
MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect (repeated) radio range to execute arbitrary javascript in the Home Assistant frontend of anyone viewing the card. This vulnerability is fixed in 0.3.3.