https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 14:12:53 +0000 https://vulnerability.circl.lu/vuln/cve-2026-82468 <p><strong>Affected:</strong> jeremyevans rodauth</p> <p>Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation and force victims to authenticate to attacker-controlled accounts.</p> <p><strong>Affected:</strong> jeremyevans rodauth</p> <p>Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation and force victims to authenticate to attacker-controlled accounts.</p> https://vulnerability.circl.lu/vuln/cve-2026-82468