CVE-2026-45773 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-45773

creationtimestamp| type| source ---|---|--- 2026-05-15 17:51:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlvviynmah2o 2026-05-19 20:10:50+00:00| seen| https://gist.github.com/alon710/e381dedd3ac6c2888e1321e911d4bec9...

CVE-2026-45773

Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14, Turborepo's self-hosted login and SSO browser flows did not validate a CSRF state value on the localhost callback. While the CLI was waiting for authentication, a malicious web page could send a...