MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions
Low severity
GitHub Reviewed
Published
Jul 1, 2026
in
MagicMirrorOrg/MagicMirror
•
Updated Aug 18, 2026
Give feedback on Dependabot alerts