VYPR

Meshcore Card

by Jpettitt

Source repositories

CVEs (1)

  • CVE-2026-45323CriMay 28, 2026
    risk 0.62cvss 9.6epss

    MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect (repeated) radio range to execute arbitrary javascript in the Home Assistant…