Skip to content
Heist/ feed
Medium

massCodeIO massCode Local HTTP Service index.ts information disclosure

Type: advisorySource: Official CVE List1 source record

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The name of the patch is d25d8fa3f5a1e34285c8634f18729650c0c05cda. It is advisable to implement a patch to correct this issue.

Announced Source revision 1
Original source ↗

CVE-2026-114574

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-114574

massCode

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:2.3:a:masscode:masscode:*:*:*:*:*:*:*:*"
    ],
    "vendor": "massCodeIO",
    "modules": [
      "Local HTTP Service"
    ],
    "product": "massCode",
    "versions": [
      {
        "status": "affected",
        "version": "5.10"
      }
    ]
  }
]
Related CVEs
CVE-2026-114574

Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event
#50030 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement