Most recent entries from all

certfr-2026-avi-0901 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

2026-10-06T23:53:44.598630+00:00

certfr-2026-avi-0901

EUVD-2026-329120

2026-10-06T23:53:44.598667+00:00

EUVD-2026-329120

fkie_cve-2026-53663

2026-10-06T23:53:44.598682+00:00

React Router is a router for React. From 7.12.0 until 7.15.1, certain CSRF checks in React Router v7 Framework Mode were insufficient and run on POST requests, but were bypassed on PUT/PATCH/DELETE requests. This is a low severity vulnerability because modern browser protections (CORS preflight, SameSite cookies) already block the cross-origin attack vectors that this missing CSRF check would otherwise gate. This vulnerability is fixed in 7.15.1.

GHSA-84g9-w2xq-vcv6 — React Router: Potential CSRF via PUT/PATCH/DELETE document requests

2026-10-06T23:53:44.598709+00:00

Affected: npm: react-router, npm: @remix-run/server-runtime

Certain CSRF checks in React Router v7 [Framework Mode]() were insufficient and run on POST requests, but were bypassed on PUT/PATCH/DELETE requests. This is a low severity vulnerability because modern browser protections (CORS preflight, SameSite cookies) already block the cross-origin attack vectors that this missing CSRF check would otherwise gate.

> [!NOTE] > This does not impact your React Router application if you are using [Declarative Mode](https://reactrouter.com/start/modes#framework) (``) or [Data Mode](https://reactrouter.com/start/modes#data) (`createBrowserRouter`/``).

openSUSE-SU-2026:11325-1 — agama-web-ui-23+0.f26ed5eab-49.1 on GA media

2026-10-06T23:53:44.598738+00:00

agama-web-ui-23+0.f26ed5eab-49.1 on GA media