Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

magicmirror

npm

The open source modular smart mirror platform.

View on github.com · View on npmjs.org

Security Advisories for magicmirror in npm

Moderate
about 7 hours ago

MagicMirror socket payload secret placeholder expansion can disclose SECRET_* environment variables GSA_kwCzR0hTQS1xNGdoLTRmZnAtNWNnOM4ABkc2

npm magicmirror
Moderate
about 8 hours ago

MagicMirror: ssrf calendar .js GSA_kwCzR0hTQS13Nng5LTI4anctaHE3as4ABkcx

npm magicmirror
Moderate
about 8 hours ago

MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery GSA_kwCzR0hTQS05OThnLTd2NXctY3I3Z84ABkcw

npm magicmirror
Low
about 8 hours ago

MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions GSA_kwCzR0hTQS13MjZyLWZ3ZzgtcmNwM84ABkcv

npm magicmirror
Critical
4 months ago

MagicMirror vulnerable to unauthenticated SSRF via /cors endpoint GSA_kwCzR0hTQS1waDZmLTJjdnEtNzlocc4ABWNE

npm magicmirror

Filter by Severity

Moderate 3 Low 1 Critical 1