Threats affecting pkg:github/alexandre-daubois/ember

CVE-2026-54162 affects Ember, a real-time terminal dashboard for Caddy servers. Versions prior to 1.4.2 improperly handle terminal escape and control sequences in HTTP request URIs within interactive TUI row formatters. This allows unauthenticated remote clients to inject control bytes that are interpreted by the terminal when viewing logs, leading to potential monitoring-dashboard spoofing, clipboard hijacking, and window-title spoofing. The issue is fixed in version 1.4.2.