CVE-2026-44342

creationtimestamp| type| source ---|---|--- 2026-07-10 00:01:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqatrxo3fx26...

CVE-2026-44342

CVE-2026-44342 describes a CSRF vulnerability in the New API where GET requests on state-changing endpoints GET /api/oauth/email/bind and GET /api/oauth/wechat/bind could allow an attacker to bind an email or OAuth identity for a logged-in user when session cookies are susceptible to cross-site n...