textream vulnerabilities

2 known vulnerabilities in textream from F. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  textream: Uncontrolled Resource Consumption

  CVE-2026-28412Mar 2, 2026F

  Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server imposes no limit on concurrent connections. Combined with a broadcast timer that sends state to all connected clients every 100 ms, an attacker can exhaust

• 7.6 High severity

  textream: Origin Validation Error

  CVE-2026-28403Mar 2, 2026F

  Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server (`ws://127.0.0.1:<httpPort+1>`) accepts connections from any origin without validating the HTTP `Origin` header during the WebSocket handshake. A malicious