Advisories · Technology
murtaza-nasir speakr.
Every CVE that names murtaza-nasir speakr among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Speakr: CSRF bypass via unauthenticated API token parameter in csrf_exempt_for_api_tokens hook
- murtaza-nasir speakr
- Authentication bypass
- Cross-site request forgery (CSRF)
- CVSS 6.1 Medium
Speakr: Open redirect in is_safe_url via parser mismatch on next parameter
- murtaza-nasir speakr
- Open redirect