magicmirror vulnerabilities (npm)
5 vulnerabilities.
-
magicmirrornpm MagicMirror socket payload secret placeholder expansion can disclose SECRET_* environment variables 4.3 Medium -
magicmirrornpm MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery 6.3 Medium -
magicmirrornpm MagicMirror: ssrf calendar .js 6.3 Medium -
magicmirrornpm MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions 2.3 Low -
magicmirrornpm MagicMirror²: Unauthenticated SSRF via /cors endpoint 9.2 Critical