8 matches found
lytx (>=0.3.0, <=0.3.15) potentially affected by CVE-2026-42190 via rwsdk (1.0.0-beta.49)
rwsdk NPM version 1.0.0-beta.49 is affected by a known vulnerability. The following packages have a transitive dependency on rwsdk and may be impacted: - lytx =0.3.0, =0.3.15 Source cves: CVE-2026-42190 Source advisory: SNYK:JS-RWSDK-16318354...
lytx (>=0.3.0, <=0.3.15) potentially affected by CVE-2026-42190 via rwsdk (1.0.0-beta.49)
rwsdk NPM version 1.0.0-beta.49 is affected by a known vulnerability. The following packages have a transitive dependency on rwsdk and may be impacted: - lytx =0.3.0, =0.3.15 Source cves: CVE-2026-42190 Source advisory: OSV:GHSA-M2M6-CFF5-3W7C...
Cross-site Request Forgery (CSRF)
Overview rwsdk is a Build fast, server-driven webapps on Cloudflare with SSR, RSC, and realtime Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the serverAction process. An attacker can trigger unauthorized state changes or actions by inducing an...
lytx (>=0.3.0, <=0.3.15) potentially affected by CVE-2026-39371 via rwsdk (1.0.0-beta.49)
rwsdk NPM version 1.0.0-beta.49 is affected by a known vulnerability. The following packages have a transitive dependency on rwsdk and may be impacted: - lytx =0.3.0, =0.3.15 Source cves: CVE-2026-39371 Source advisory: OSV:GHSA-X8RX-789C-2PXQ...
Cross-site Request Forgery (CSRF)
Overview rwsdk is a Build fast, server-driven webapps on Cloudflare with SSR, RSC, and realtime Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the server function dispatch process. An attacker can cause unauthorized state-changing operations by tricking a...
lytx (>=0.3.0, <=0.3.15) potentially affected by CVE-2026-39371 via rwsdk (1.0.0-beta.49)
rwsdk NPM version 1.0.0-beta.49 is affected by a known vulnerability. The following packages have a transitive dependency on rwsdk and may be impacted: - lytx =0.3.0, =0.3.15 Source cves: CVE-2026-39371 Source advisory: SNYK:JS-RWSDK-15995504...
@redwoodjs/sdk (>=0.0.63-test.2, <=0.0.79), @storybook/experimental-nextjs-rsc (>=0.0.0-pr-31893-sha-392fa9a5, <=0.0.0-pr-31893-sha-f0bf2189) +1 more potentially affected by CVE-2025-55182 via react-server-dom-webpack (19.2.0-canary-39cad7af-20250411)
react-server-dom-webpack NPM version 19.2.0-canary-39cad7af-20250411 is affected by a known vulnerability. The following packages have a transitive dependency on react-server-dom-webpack and may be impacted: - @redwoodjs/sdk =0.0.63-test.2, =0.0.0-pr-31893-sha-392fa9a5, =0.0.79-test.2025050614455...
@redwoodjs/sdk (>=0.0.63-test.2, <=0.0.79), @storybook/experimental-nextjs-rsc (>=0.0.0-pr-31893-sha-392fa9a5, <=0.0.0-pr-31893-sha-f0bf2189) +1 more potentially affected by CVE-2025-55182 via react-server-dom-webpack (19.2.0-canary-39cad7af-20250411)
react-server-dom-webpack NPM version 19.2.0-canary-39cad7af-20250411 is affected by a known vulnerability. The following packages have a transitive dependency on react-server-dom-webpack and may be impacted: - @redwoodjs/sdk =0.0.63-test.2, =0.0.0-pr-31893-sha-392fa9a5, =0.0.79-test.2025050614455...