CVE-2026-39371
1 advisory.
npm/rwsdk CVE-2026-39371: high 8.1, EPSS 0.19%
RedwoodSDK has a CSRF vulnerability in server function dispatch via GET requests
Action: Upgrade rwsdk to 1.0.6 or later.
npm i rwsdk@1.0.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0-beta.50 | 1.0.6 | - |
Fixed versions
| 1.0.6 |
Sources
- osv: GHSA-x8rx-789c-2pxq
- https://github.com/redwoodjs/sdk/security/advisories/GHSA-x8rx-789c-2pxq
- https://nvd.nist.gov/vuln/detail/CVE-2026-39371
- https://github.com/redwoodjs/sdk
CVE-2026-39371 · published · modified · JSON