https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:09:49 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-35665 cnvd-2017-35665 https://cve.radiocsirt.org/vuln/cnvd-2017-35665 https://cve.radiocsirt.org/vuln/euvd-2026-79037 EUVD-2026-79037 https://cve.radiocsirt.org/vuln/euvd-2026-79037 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16570 <p>KeystoneJS before 4.0.0-beta.7 allows application-wide CSRF bypass by removing the CSRF parameter and value, aka SecureLayer7 issue number SL7_KEYJS_03. In other words, it fails to reject requests that lack an x-csrf-token header.</p> <p>KeystoneJS before 4.0.0-beta.7 allows application-wide CSRF bypass by removing the CSRF parameter and value, aka SecureLayer7 issue number SL7_KEYJS_03. In other words, it fails to reject requests that lack an x-csrf-token header.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-16570 https://cve.radiocsirt.org/vuln/ghsa-q43c-g2g7-6gxj <p><strong>Affected:</strong> npm: keystone</p> <p>Versions of `keystone` prior to 4.0.0 are vulnerable to Cross-Site Request Forgery (CSRF). The package fails to validate the presence of the `X-CSRF-Token` header, which may allow attackers to carry actions on behalf of other users on all endpoints.</p> <p>## Recommendation</p> <p>Update to version 4.0.0 or later.</p> <p><strong>Affected:</strong> npm: keystone</p> <p>Versions of `keystone` prior to 4.0.0 are vulnerable to Cross-Site Request Forgery (CSRF). The package fails to validate the presence of the `X-CSRF-Token` header, which may allow attackers to carry actions on behalf of other users on all endpoints.</p> <p>## Recommendation</p> <p>Update to version 4.0.0 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-q43c-g2g7-6gxj https://cve.radiocsirt.org/vuln/gsd-2017-16570 gsd-2017-16570 https://cve.radiocsirt.org/vuln/gsd-2017-16570