pkg:npm/rwsdk
2 total CVEsHIGH1MEDIUM1
✅ Check your installed version
All known vulnerabilities
HIGH8.1CVE-2026-39371RedwoodSDK has a CSRF vulnerability in server function dispatch via GET requests >= 1.0.0-beta.50, < 1.0.6
MEDIUM5.3CVE-2026-42190RedwoodSDK has Same-site CSRF through lack of origin validation in its server actions >= 1.0.0-beta.50, < 1.2.3