VYPR

Textream

by Textream

CVEs (1)

  • CVE-2026-28403HigMar 2, 2026
    risk 0.00cvss 7.6epss 0.00

    Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server (`ws://127.0.0.1:<httpPort+1>`) accepts connections from any origin without validating the HTTP `Origin` header during the WebSocket handshake. A malicious web page visited…