GHSA-58c5-g7wp-6w37: Angular is Vulnerable to XSRF Token Leakage via Protocol-Relative URLs in Angular HTTP Client

GHSA-wmjr-v86c-m9jj: Better Auth's multi-session sign-out hook allows forged cookies to revoke arbitrary sessions

GHSA-j9wj-m24m-7jj6: willitmerge has a Command Injection vulnerability

GHSA-554w-wpv2-vw27: node-forge has ASN.1 Unbounded Recursion

GHSA-65ch-62r8-g69g: node-forge is vulnerable to ASN.1 OID Integer Truncation

In mongo-express 1.0.2, /admin allows CSRF, as demonstrated by deletion of a Collection.

**mongo-express Cross-site Request Forgery vulnerability**

Moderate severity GitHub Reviewed Published Mar 1, 2024 to the GitHub Advisory Database • Updated Mar 1, 2024

Headline

GHSA-fffg-cwc9-xvj7: mongo-express Cross-site Request Forgery vulnerability

ghsa: Latest News