CVE-2026-40864

CVE-2026-40864 — JupyterHub XSRF-Umgehung durch Cross-Origin-Formular-POST Sec-Fetch-Mode: no-cors Schweregrad : Mittel CWE : CWE-352 — Cross-Site Request Forgery XSRF Betroffen : jupyterhub 4.1.0 ≤ Version 5.4.5 behoben in 5.4.5 Advisory : GHSA-m68r-v472-jgq9 NVD :...

CVE-2026-80210

FrontAccounting through 2.4.20 generates a CSRF token in endform in includes/ui/uicontrols.inc and embeds it as the token hidden field in every form it renders, but only admin/users.php and admin/changecurrentuserpassword.php call checkcsrftoken to validate it. No financial transaction handler...