https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:02:52 +0000 https://cve.radiocsirt.org/vuln/cve-2021-29624 <p><strong>Affected:</strong> fastify-csrf</p> <p>fastify-csrf is an open-source plugin helps developers protect their Fastify server against CSRF attacks. Versions of fastify-csrf prior to 3.1.0 have a &#34;double submit&#34; mechanism using cookies with an application deployed across multiple subdomains, e.g. &#34;heroku&#34;-style platform as a service. Version 3.1.0 of the fastify-csrf fixes it. the vulnerability. The user of the module would need to supply a `userInfo` when generating the CSRF token to fully implement the protection on their end. This is needed only for applications hosted on different subdomains.</p> <p><strong>Affected:</strong> fastify-csrf</p> <p>fastify-csrf is an open-source plugin helps developers protect their Fastify server against CSRF attacks. Versions of fastify-csrf prior to 3.1.0 have a &#34;double submit&#34; mechanism using cookies with an application deployed across multiple subdomains, e.g. &#34;heroku&#34;-style platform as a service. Version 3.1.0 of the fastify-csrf fixes it. the vulnerability. The user of the module would need to supply a `userInfo` when generating the CSRF token to fully implement the protection on their end. This is needed only for applications hosted on different subdomains.</p> https://cve.radiocsirt.org/vuln/cve-2021-29624