meta.sr.ht vulnerabilities

CVEs whose affected-version data names the meta.sr.ht package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121728Medium· 5.3

5d ago

SourceHut meta.sr.ht 0.56.11 before 0.89.0 Registration Authorization Bypass via /register/step2

SourceHut meta.sr.ht 0.56.11 before 0.89.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to register accounts when public registration is disabled. Attackers can obtain a CSRF token from /login and …

▾ SunlitSourceHut · meta.sr.htEPSS 0.26%via CVEORG