CVE-2026-67990

The basecamp/upright library (specifically at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f ) is vulnerable to a Cross-Site Request Forgery (CSRF) flaw because it disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An unauthenticated attacker can trick a logged...