Magicmirrororg Magicmirror vulnerabilities
- magicmirrororg magicmirror MagicMirror socket payload secret placeholder expansion can disclose SECRET_* environment variables 4.3 Medium
- magicmirrororg magicmirror MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery 6.3 Medium
- magicmirrororg magicmirror MagicMirror: ssrf calendar .js 6.3 Medium
- magicmirrororg magicmirror MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions 2.3 Low
- magicmirror MagicMirror²: Unauthenticated SSRF via /cors endpoint 9.2 Critical