redwoodjs

Products

ProductCVEsExploitedLatest
sdk2–May 8, 2026

Exploited and recent CVEs

  • CVE-2026-42190 Medium 5.3 RedwoodSDK: Same-site CSRF in in server actions 0.1%
  • CVE-2026-39371 High 8.1 RedwoodSDK has a CSRF vulnerability in server function dispatch via GET requests 0.2%