Threats Tagged 'ghsa-c67v-vqrp-m5wj'
View all threats tagged with 'ghsa-c67v-vqrp-m5wj'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-c67v-vqrp-m5wj'
Click on any threat for detailed analysis and mitigation recommendations
0 djust versions prior to 1.0.7 have a vulnerability where state snapshots embedded in client pages are not integrity-checked. This allows a client to modify unsigned state data such as authorization flags or account information and send it back to the server, potentially escalating privileges or tampering with business state. The issue is fixed in version 1.0.7 by signing state snapshots and rejecting unsigned or forged snapshots on restore. As a workaround, disabling state snapshots or avoiding storing authorization state in public view attributes mitigates the risk. Join the discussion | CVE Database V5 | 09/16/2026, 21:57:26 UTC Added: 09/17/2026, 01:48:23 UTC |
Showing 1 to 1 of 1 result