sdk vulnerabilities

1 known vulnerability in sdk from Redwoodjs. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  sdk: Cross-Site Request Forgery

  CVE-2026-39371Apr 7, 2026Redwoodjs

  RedwoodSDK is a server-first React framework. From 1.0.0-beta.50 to 1.0.5, erver functions exported from "use server" files could be invoked via GET requests, bypassing their intended HTTP method. In cookie-authenticated applications, this allowed cross-site G