wetty vulnerabilities

1 known vulnerability in wetty from Butlerx. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  wetty: Improper Neutralization of Input During Web Page Generation

  CVE-2026-49864Aug 13, 2026Butlerx

  wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolates it raw into a Toastify HTML string (`escapeMarkup: false`). Any output the vic