CVE-2026-82468

Rodauth versions before 2.47.0 contain a cross-site request forgery (CSRF) protection bypass in the JSON request content type validation. An attacker can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation, forcing victims to aut...

CVE-2026-40864

CVE-2026-40864 — JupyterHub XSRF-Umgehung durch Cross-Origin-Formular-POST Sec-Fetch-Mode: no-cors Schweregrad : Mittel CWE : CWE-352 — Cross-Site Request Forgery XSRF Betroffen : jupyterhub 4.1.0 ≤ Version 5.4.5 behoben in 5.4.5 Advisory : GHSA-m68r-v472-jgq9 NVD :...