CVE-2026-42190
1 advisory.
npm/rwsdk CVE-2026-42190: medium 5.3
RedwoodSDK has Same-site CSRF through lack of origin validation in its server actions
Action: Upgrade rwsdk to 1.2.3 or later.
npm i rwsdk@1.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0-beta.50 | 1.2.3 | - |
Fixed versions
| 1.2.3 |
Sources
- osv: GHSA-m2m6-cff5-3w7c
- https://github.com/redwoodjs/sdk/security/advisories/GHSA-m2m6-cff5-3w7c
- https://nvd.nist.gov/vuln/detail/CVE-2026-42190
- https://github.com/redwoodjs/sdk
- https://github.com/redwoodjs/sdk/releases/tag/v1.2.3
CVE-2026-42190 · published · modified · JSON