Known Vulnerabilities for Csrf-protection by Fastify
Listed below are 1 of the newest known vulnerabilities associated with "Csrf-protection" by "Fastify".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-73847 json | Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant execute_t... | Not Provided | 2026-08-14 | 2026-08-14 |
| CVE-2026-73292 json | Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.21, the /api/users/{id}/password endpoint accepts a ... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-73162 json | Affected versions of MISP cti-transmute expose several state-changing account operations as GET requests: * /account/f... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-72701 json | Grav CMS before 2.0.16 contains a timing vulnerability in Utils::verifyNonce() that uses non-constant-time string comparison ... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2026-70376 json | Pluck CMS's admin panel relies solely on a Referer-header comparison (requestedByTheSameDomain in data/inc/functions.admin.ph... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-67990 json | basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and P... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-67364 json | Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2 - CWE-94 / CWE-95 | CVSS 3.1: 9.8 Cri... | Not Provided | 2026-08-19 | 2026-08-21 |
| CVE-2026-67361 json | Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.... | Not Provided | 2026-08-21 | 2026-08-21 |
| CVE-2026-62862 json | Typebot is an open-source chatbot builder. In self-hosted versions up to and including 3.17.1, the default passwordless email... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2026-62232 json | Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login plugin where the regenerate2FASecret... | Not Provided | 2026-07-17 | 2026-07-17 |