https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:53:17 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0901 certfr-2026-avi-0901 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0901 https://cve.radiocsirt.org/vuln/euvd-2026-329120 EUVD-2026-329120 https://cve.radiocsirt.org/vuln/euvd-2026-329120 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53663 <p>React Router is a router for React. From 7.12.0 until 7.15.1, certain CSRF checks in React Router v7 Framework Mode were insufficient and run on POST requests, but were bypassed on PUT/PATCH/DELETE requests. This is a low severity vulnerability because modern browser protections (CORS preflight, SameSite cookies) already block the cross-origin attack vectors that this missing CSRF check would otherwise gate. This vulnerability is fixed in 7.15.1.</p> <p>React Router is a router for React. From 7.12.0 until 7.15.1, certain CSRF checks in React Router v7 Framework Mode were insufficient and run on POST requests, but were bypassed on PUT/PATCH/DELETE requests. This is a low severity vulnerability because modern browser protections (CORS preflight, SameSite cookies) already block the cross-origin attack vectors that this missing CSRF check would otherwise gate. This vulnerability is fixed in 7.15.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-53663 https://cve.radiocsirt.org/vuln/ghsa-84g9-w2xq-vcv6 <p><strong>Affected:</strong> npm: react-router, npm: @remix-run/server-runtime</p> <p>Certain CSRF checks in React Router v7 [Framework Mode]() were insufficient and run on POST requests, but were bypassed on PUT/PATCH/DELETE requests. This is a low severity vulnerability because modern browser protections (CORS preflight, SameSite cookies) already block the cross-origin attack vectors that this missing CSRF check would otherwise gate.</p> <p>&gt; [!NOTE] &gt; This does not impact your React Router application if you are using [Declarative Mode](https://reactrouter.com/start/modes#framework) (`&lt;BrowserRouter&gt;`) or [Data Mode](https://reactrouter.com/start/modes#data) (`createBrowserRouter`/`&lt;RouterProvider&gt;`).</p> <p><strong>Affected:</strong> npm: react-router, npm: @remix-run/server-runtime</p> <p>Certain CSRF checks in React Router v7 [Framework Mode]() were insufficient and run on POST requests, but were bypassed on PUT/PATCH/DELETE requests. This is a low severity vulnerability because modern browser protections (CORS preflight, SameSite cookies) already block the cross-origin attack vectors that this missing CSRF check would otherwise gate.</p> <p>&gt; [!NOTE] &gt; This does not impact your React Router application if you are using [Declarative Mode](https://reactrouter.com/start/modes#framework) (`&lt;BrowserRouter&gt;`) or [Data Mode](https://reactrouter.com/start/modes#data) (`createBrowserRouter`/`&lt;RouterProvider&gt;`).</p> https://cve.radiocsirt.org/vuln/ghsa-84g9-w2xq-vcv6 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11325-1 <p>agama-web-ui-23+0.f26ed5eab-49.1 on GA media</p> <p>agama-web-ui-23+0.f26ed5eab-49.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11325-1