CVE-2026-67993

The basecamp/upright software (at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f) contains a login cross-site request forgery (CSRF) issue within the static credentials callback . The vulnerability specifically involves the session handling logic in the sessions_controller.rb file. No informatio...

EUVD-2026-89426

basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credentials callback...