https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T16:20:45.390065+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-3267 CVE-2022-3267 — Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb 2026-10-26T16:20:45.391736+00:00

Affected: ikus060/rdiffweb

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.

 https://cve.radiocsirt.org/vuln/ghsa-74j6-3hh4-w3f5 GHSA-74j6-3hh4-w3f5 — rdiffweb Cross-Site Request Forgery vulnerability 2026-10-26T16:20:45.391786+00:00

Affected: PyPI: rdiffweb

rdiffweb prior to 2.4.6 is vulnerable to cross-site request forgery on the repository settings. A malicious user can change the settings of a repository by sending a URL to the victim. This issue is fixed in version 2.4.6.