https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 13:37:37 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-67990 <p>basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An unauthenticated attacker can induce a logged-in user&#39;s browser to submit requests that are forwarded to enabled upstream write or management endpoints, such as creating an Alertmanager silence or requesting a Prometheus reload. The final impact depends on the APIs enabled by the upstream services.</p> <p>basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An unauthenticated attacker can induce a logged-in user&#39;s browser to submit requests that are forwarded to enabled upstream write or management endpoints, such as creating an Alertmanager silence or requesting a Prometheus reload. The final impact depends on the APIs enabled by the upstream services.</p> https://db.gcve.eu/vuln/fkie_cve-2026-67990 https://db.gcve.eu/vuln/ghsa-q9r6-h8cx-q7qp <p>basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An unauthenticated attacker can induce a logged-in user&#39;s browser to submit requests that are forwarded to enabled upstream write or management endpoints, such as creating an Alertmanager silence or requesting a Prometheus reload. The final impact depends on the APIs enabled by the upstream services.</p> <p>basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An unauthenticated attacker can induce a logged-in user&#39;s browser to submit requests that are forwarded to enabled upstream write or management endpoints, such as creating an Alertmanager silence or requesting a Prometheus reload. The final impact depends on the APIs enabled by the upstream services.</p> https://db.gcve.eu/vuln/ghsa-q9r6-h8cx-q7qp https://db.gcve.eu/vuln/ubuntu-cve-2026-67990 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: at, Ubuntu:16.04:LTS: at, Ubuntu:18.04:LTS: at, Ubuntu:20.04:LTS: at, Ubuntu:22.04:LTS: at, Ubuntu:24.04:LTS: at, Ubuntu:26.04:LTS: at</p> <p>basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An unauthenticated attacker can induce a logged-in user&#39;s browser to submit requests that are forwarded to enabled upstream write or management endpoints, such as creating an Alertmanager silence or requesting a Prometheus reload. The final impact depends on the APIs enabled by the upstream services.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: at, Ubuntu:16.04:LTS: at, Ubuntu:18.04:LTS: at, Ubuntu:20.04:LTS: at, Ubuntu:22.04:LTS: at, Ubuntu:24.04:LTS: at, Ubuntu:26.04:LTS: at</p> <p>basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An unauthenticated attacker can induce a logged-in user&#39;s browser to submit requests that are forwarded to enabled upstream write or management endpoints, such as creating an Alertmanager silence or requesting a Prometheus reload. The final impact depends on the APIs enabled by the upstream services.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-67990