tasmota

Releases4

Frequency1 year 9 months

Last Releaseover 2 years ago

Tasmota API wrapper

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2021-36603NVD↗	= 6.5.0	Jan 9, 2023Monday, 9 January 2023, 21:15	6.1 MEDIUM	—
Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a crafted string in the field "Friendly Name 1".
CVE-2022-43294NVD↗	= *, < 12.2.0	Nov 14, 2022Monday, 14 November 2022, 22:15	9.8 CRITICAL	—
Tasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack overflow via the ClientPortPtr parameter at lib/libesp32/rtsp/CRtspSession.cpp.