Skip to content
OpenAdvisories

Package · Debian

transmission

12 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-116748 Scanner template

    Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token

    Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin. Malicious web pages can read the token from the 409 handshake response …