CVE-2026-59977

The ConvertX self-hosted file conversion service is vulnerable to Cross-Site Request Forgery (CSRF) in versions prior to 0.18.0 . The vulnerability exists because the /delete/{id} endpoint performs permanent deletions using HTTP GET requests without CSRF protection. An attacker can trick an authe...