https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T08:20:56.010370+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-42199 EUVD-2026-42199 2026-10-13T08:20:56.013150+00:00 EUVD-2026-42199 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14043 fkie_cve-2020-14043 2026-10-13T08:20:56.013179+00:00

** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Side Request Forgery (CSRF) vulnerability was found in Codiad v1.7.8 and later. The request to download a plugin from the marketplace is only available to admin users and it isn't CSRF protected in components/market/controller.php. This might cause admins to make a vulnerable request without them knowing and result in remote code execution. NOTE: the vendor states "Codiad is no longer under active maintenance by core contributors."

 https://cve.radiocsirt.org/vuln/ghsa-35gp-jxw8-xw6h GHSA-35gp-jxw8-xw6h — Codiad CSRF Vulnerability 2026-10-13T08:20:56.013211+00:00

Affected: Packagist: codiad/codiad

A Cross Side Request Forgery (CSRF) vulnerability was found in Codiad v1.7.8 and later. The request to download a plugin from the marketplace is only available to admin users and it isn't CSRF protected in components/market/controller.php. This might cause admins to make a vulnerable request without them knowing and result in remote code execution. **NOTE:** the vendor states "Codiad is no longer under active maintenance by core contributors."

 https://cve.radiocsirt.org/vuln/gsd-2020-14043 gsd-2020-14043 2026-10-13T08:20:56.013236+00:00 gsd-2020-14043