meshcentral (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package meshcentral, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2023-51837 — CVSS 9.8 (critical): Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation.
• CVE-2024-26135 — CVSS 8.3 (high): MeshCentral is a full computer management web site. Versions prior to 1.1.21 a cross-site websocket hijacking (CSWSH) vulnerability within…
• CVE-2023-51838 — CVSS 7.5 (high): Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.
• CVE-2023-51842 — CVSS 7.5 (high): An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16.