Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-30807 |
|
Cross-Site Request Forgery (CSRF) in artica (CVE-2026-30807)
vulnerability in artica (CVE-2026-30807). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42073 |
|
Cross-Site Request Forgery (CSRF) in @gitlawb/openclaude (CVE-2026-42073)
vulnerability in @gitlawb/openclaude (CVE-2026-42073). Risk of unauthorized operations or information disclosure. Exploitable via ``error``. Mitigation: upgrade to `0.5.1` or later.
|
| CVE-2026-6932 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6932)
vulnerability in wordpress (CVE-2026-6932). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6710 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6710)
vulnerability in wordpress (CVE-2026-6710). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7562 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-7562)
vulnerability in wordpress (CVE-2026-7562). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7616 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-7616)
vulnerability in wordpress (CVE-2026-7616). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7561 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-7561)
vulnerability in wordpress (CVE-2026-7561). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20704 |
|
Cross-Site Request Forgery (CSRF) in jvn (CVE-2026-20704)
vulnerability in jvn (CVE-2026-20704). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45430 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-45430)
vulnerability in csrf (CVE-2026-45430). Confidential information can be exposed externally.
|
| CVE-2026-0502 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-0502)
vulnerability in csrf (CVE-2026-0502). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44695 |
|
Cross-Site Request Forgery (CSRF) in getoutline (CVE-2026-44695)
vulnerability in getoutline (CVE-2026-44695). Confidential information can be exposed externally. Exploitable via `GET /auth/slack.post`. Mitigation: upgrade to `1.7.1` or later.
|
| CVE-2026-43877 |
|
Cross-Site Request Forgery (CSRF) in wwbn/avideo (CVE-2026-43877)
vulnerability in wwbn/avideo (CVE-2026-43877). Risk of unauthorized operations or information disclosure. Exploitable via ``autoCSRFGuard``.
|
| CVE-2026-38566 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-38566)
vulnerability in csrf (CVE-2026-38566). Confidential information can be exposed externally.
|
| CVE-2022-50955 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2022-50955)
vulnerability in wordpress (CVE-2022-50955). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-47946 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2021-47946)
vulnerability in csrf (CVE-2021-47946). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-47953 |
|
Cross-Site Request Forgery (CSRF) in CVE-2021-47953 (CVE-2021-47953)
vulnerability in CVE-2021-47953 (CVE-2021-47953). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8194 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-8194 (CVE-2026-8194)
vulnerability in CVE-2026-8194 (CVE-2026-8194). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42286 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-42286)
vulnerability in csrf (CVE-2026-42286). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42190 |
|
Cross-Site Request Forgery (CSRF) in rwsdk (CVE-2026-42190)
vulnerability in rwsdk (CVE-2026-42190). Data can be tampered with by attackers. Exploitable via ``rwsdk``. Mitigation: upgrade to `1.2.3` or later.
|
| CVE-2026-5791 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-5791)
vulnerability in csrf (CVE-2026-5791). Data can be tampered with by attackers.
|
| CVE-2026-42091 |
|
Cross-Site Request Forgery (CSRF) in github.com/patrickhener/goshs (CVE-2026-42091)
vulnerability in github.com/patrickhener/goshs (CVE-2026-42091). Data can be tampered with by attackers. Exploitable via ``e3c3d37``. Mitigation: upgrade to `2.0.2` or later.
|
| CVE-2026-36960 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-36960)
vulnerability in csrf (CVE-2026-36960). Successful exploitation can lead to full system takeover.
|
| CVE-2026-36956 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-36956)
vulnerability in csrf (CVE-2026-36956). Successful exploitation can lead to full system takeover.
|
| CVE-2026-38934 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-38934 (CVE-2026-38934)
vulnerability in CVE-2026-38934 (CVE-2026-38934). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40948 |
|
Cross-Site Request Forgery (CSRF) in apache (CVE-2026-40948)
vulnerability in apache (CVE-2026-40948). Risk of unauthorized operations or information disclosure. Exploitable via ``state``.
|
| CVE-2026-39848 |
|
Vulnerability in csrf (CVE-2026-39848)
vulnerability in csrf (CVE-2026-39848). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.0` or later.
|
| CVE-2026-5918 |
|
Vulnerability in google (CVE-2026-5918)
vulnerability in google (CVE-2026-5918). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34721 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34721)
vulnerability in csrf (CVE-2026-34721). Confidential information can be exposed externally. Mitigation: upgrade to `7.0.1` or later.
|
| CVE-2026-0811 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-0811)
vulnerability in wordpress (CVE-2026-0811). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1673 |
|
Cross-Site Request Forgery (CSRF) in csharp (CVE-2026-1673)
vulnerability in csharp (CVE-2026-1673). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1672 |
|
Cross-Site Request Forgery (CSRF) in csharp (CVE-2026-1672)
vulnerability in csharp (CVE-2026-1672). Data can be tampered with by attackers.
|
| CVE-2026-39710 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39710)
vulnerability in csrf (CVE-2026-39710). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39671 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39671)
vulnerability in csrf (CVE-2026-39671). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39635 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39635)
vulnerability in csrf (CVE-2026-39635). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39634 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39634)
vulnerability in csrf (CVE-2026-39634). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39640 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39640)
vulnerability in csrf (CVE-2026-39640). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39641 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39641)
vulnerability in csrf (CVE-2026-39641). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39632 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39632)
vulnerability in csrf (CVE-2026-39632). Data can be tampered with by attackers.
|
| CVE-2026-39633 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39633)
vulnerability in csrf (CVE-2026-39633). Data can be tampered with by attackers.
|
| CVE-2026-39620 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39620)
vulnerability in csrf (CVE-2026-39620). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39621 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39621)
vulnerability in csrf (CVE-2026-39621). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39617 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39617)
vulnerability in csrf (CVE-2026-39617). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39618 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39618)
vulnerability in csrf (CVE-2026-39618). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39619 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39619)
vulnerability in csrf (CVE-2026-39619). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39603 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39603)
vulnerability in csrf (CVE-2026-39603). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4141 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-4141)
vulnerability in wordpress (CVE-2026-4141). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3499 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-3499)
vulnerability in wordpress (CVE-2026-3499). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39371 |
|
Cross-Site Request Forgery (CSRF) in react (CVE-2026-39371)
vulnerability in react (CVE-2026-39371). Data can be tampered with by attackers. Mitigation: upgrade to `1.0.6` or later.
|
| CVE-2026-35180 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-35180)
vulnerability in csrf (CVE-2026-35180). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35181 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-35181)
vulnerability in csrf (CVE-2026-35181). Risk of unauthorized operations or information disclosure.
|