{"action":"Upgrade meshcentral to 1.1.21 or later.","affected":[{"fixed":"1.1.21","introduced":"0"}],"component":"meshcentral","cve_ids":["CVE-2024-26135"],"ecosystem":"npm","epss":0.0046,"exploited":false,"fixed_versions":["1.1.21"],"ghsa_id":"GHSA-cp68-qrhr-g9h8","id":"tcs_01M5KFK67JG02C6MFMT2Y38MJW","modified_at":"2026-09-10T03:50:06.169417681Z","published_at":"2024-02-21T00:10:30Z","references":["https://osv.dev/vulnerability/GHSA-cp68-qrhr-g9h8","https://github.com/Ylianst/MeshCentral/security/advisories/GHSA-cp68-qrhr-g9h8","https://nvd.nist.gov/vuln/detail/CVE-2024-26135","https://github.com/Ylianst/MeshCentral/commit/f2e43cc6da9f5447dbff0948e6c6024c8a315af3","https://github.com/Ylianst/MeshCentral"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"GHSA-cp68-qrhr-g9h8","url":"https://osv.dev/vulnerability/GHSA-cp68-qrhr-g9h8"}],"summary":"MeshCentral cross-site websocket hijacking (CSWSH) vulnerability"}