High · 8.8 CVE-2026-67993 EUVD-2026-89426GHSA-87h2-rxqx-gq78

basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credent…

Published Sep 29, 2026 · Updated Sep 30, 2026 · Assigned by mitre

Description

basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credentials callback.

References

https://github.com/basecamp/upright
https://github.com/basecamp/upright/blob/efe4f2e5254ac6e57e45d2261804cca74dbbca3f/app/controllers/upright/sessions_controller.rb#L3