.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

tesla 1.18.3 vulnerabilities

5 advisories known · tesla@1.18.3 · none affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Does not affect 1.18.3

SEVERITYADVISORYPUBLISHED

HighTesla has decompression bomb on response bodyGHSA-mc85-72gr-vm9fCVE-2026-48594EEF-CVE-2026-48594Affected >=0.6.0 <1.18.3Fixed in 1.18.3OSV source ↗5 months ago

HighTesla: Authorization header leaks on cross-origin redirect via case-sensitive filteringGHSA-9m9w-gxf7-rh8mCVE-2026-48595EEF-CVE-2026-48595Affected >=0.6.0 <1.18.3Fixed in 1.18.3OSV source ↗5 months ago

HighTesla vulnerable to atom exhaustion via untrusted URL schemeGHSA-h74c-q9j7-mpcmCVE-2026-48597EEF-CVE-2026-48597Affected >=1.3.0 <1.18.3Fixed in 1.18.3OSV source ↗5 months ago

LowTesla has CRLF injection in request `Content-Type` header via `add_content_type_param`GHSA-q7jx-v53g-848wCVE-2026-48596EEF-CVE-2026-48596Affected >=0.8.0 <1.18.3Fixed in 1.18.3OSV source ↗5 months ago

LowTesla vulnerable to multipart part smuggling via unescaped `content-disposition` valuesGHSA-28jh-g32x-v9v4CVE-2026-48598EEF-CVE-2026-48598Affected >=0.8.0 <1.18.3Fixed in 1.18.3OSV source ↗5 months ago