PT-2026-93822

Name of the Vulnerable Software and Affected Versions djust versions prior to 1.0.7 Description The SSE client-to-server POST endpoints are marked as @csrf exempt and the SSE GET stream endpoint lacks an Origin check. This allows a cross-origin page to manipulate a session authenticated by victim...