Known Vulnerabilities for Csrf by Go-macaron
Listed below are 1 of the newest known vulnerabilities associated with "Csrf" by "Go-macaron".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-64821 json | djangoSIGE through 1.10 (commit a6fe7e8) contains a cross-site request forgery vulnerability that allows unauthenticated atta... | Not Provided | 2026-07-21 | 2026-07-22 |
| CVE-2026-64791 json | Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installati... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-63685 json | Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauth... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-63684 json | Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-63265 json | Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions an... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-62236 json | grav-plugin-login before 3.8.11 contains a cross-site request forgery (CSRF) vulnerability in the login.regenerate2FASecret f... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-62232 json | Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login plugin where the regenerate2FASecret... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-61956 json | Cross-Site Request Forgery (CSRF) vulnerability in hamsalam ووسلام – همگام سازی ووکامرس و باس... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-61502 json | Rejetto HFS 3.0.0 through 3.2.0 accepts state-changing API requests via the GET method and exempts GET requests from its anti... | Not Provided | 2026-07-13 | 2026-07-14 |
| CVE-2026-60105 json | Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetchRemoteFile action caused by an inco... | Not Provided | 2026-07-08 | 2026-07-14 |