39556 matches found
CVE-2026-53663 React Router: `handleDocumentRequest` CSRF check covers `POST` only; PUT/PATCH/DELETE bypass
React Router is a router for React. From 7.12.0 until 7.15.1, certain CSRF checks in React Router v7 Framework Mode were insufficient and run on POST requests, but were bypassed on PUT/PATCH/DELETE requests. This is a low severity vulnerability because modern browser protections CORS preflight,...
CVE-2026-53663
React Router (v7 Framework Mode) is affected in versions 7.12.0–7.15.0 where CSRF checks run on POST but not on PUT/PATCH/DELETE; this could enable cross-origin state changes. The issue is considered low severity due to browser protections (CORS preflight, SameSite cookies). It has been fixed in ...
CVE-2026-53663
React Router is a router for React. From 7.12.0 until 7.15.1, certain CSRF checks in React Router v7 Framework Mode were insufficient and run on POST requests, but were bypassed on PUT/PATCH/DELETE requests. This is a low severity vulnerability because modern browser protections CORS preflight,...
CVE-2026-53663 React Router: `handleDocumentRequest` CSRF check covers `POST` only; PUT/PATCH/DELETE bypass
React Router is a router for React. From 7.12.0 until 7.15.1, certain CSRF checks in React Router v7 Framework Mode were insufficient and run on POST requests, but were bypassed on PUT/PATCH/DELETE requests. This is a low severity vulnerability because modern browser protections CORS preflight,...
CVE-2026-8074
creationtimestamp| type| source ---|---|--- 2026-06-22 16:48:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movdpagmtf22...
CVE-2026-28381
creationtimestamp| type| source ---|---|--- 2026-06-22 16:43:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movdgbwzk622 2026-06-22 17:06:39+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3movepagixn2c 2026-06-22 22:26:13+00:00| seen|...
CVE-2026-6062
creationtimestamp| type| source ---|---|--- 2026-06-22 16:38:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movd5djfrc2j...
CVE-2025-33128
creationtimestamp| type| source ---|---|--- 2026-06-22 16:28:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movclgmg3t2y...
MAL-2026-6263 Malicious code in gd-auth-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de00613e21b42bf3c651995beae63ff9d85772b9370145152d172a062be4fb7 package.json declares preinstall: node index.js, which runs automatically on npm install. index.js requires os, dns, https, querystring, and the loca...
CVE-2026-6673
creationtimestamp| type| source ---|---|--- 2026-06-22 16:23:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movcci4nxt2g...
CVE-2026-7166
creationtimestamp| type| source ---|---|--- 2026-06-22 16:19:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movc2shx3i2q 2026-06-22 19:30:12+00:00| seen| https://infosec.exchange/users/offseq/statuses/116795415672753898 2026-06-22 19:30:14+00:00| seen|...
CVE-2026-9162
creationtimestamp| type| source ---|---|--- 2026-06-22 16:15:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movbu35xhn2t...
CVE-2026-7167
creationtimestamp| type| source ---|---|--- 2026-06-22 16:12:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movbo42pdw22...
CVE-2026-50184
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during...
EUVD-2026-38249
Mattermost versions 11.7.x = 11.7.0, 11.6.x = 11.6.2, 11.5.x = 11.5.5, 10.11.x = 10.11.17 fail to authenticate Atlassian Connect installed callbacks, allowing a remote unauthenticated attacker to inject a rogue sharedSecret and disrupt the Jira integration via POST to /ac/installed during the...
CVE-2026-12580
creationtimestamp| type| source ---|---|--- 2026-06-22 12:17:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mouujtdzm622...
CVE-2026-49056
creationtimestamp| type| source ---|---|--- 2026-06-22 12:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mouuhr7hhs2m...
CVE-2026-12862
creationtimestamp| type| source ---|---|--- 2026-06-22 12:00:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moutmiscx52y...