All 2 CVE vulnerabilities found in speakr, with AI-generated Chinese analysis, references, and POCs.
Vendor: murtaza-nasir
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-54510 | Speakr: CSRF bypass via unauthenticated API token parameter in csrf_exempt_for_api_tokens hook CWE-287 | 7.1 | High | 2026-09-17 |
| CVE-2026-45307 | Speakr: Open redirect in is_safe_url via parser mismatch on next parameter CWE-601 | 6.1 | Medium | 2026-05-28 |
All 2 known CVE vulnerabilities affecting speakr with full Chinese analysis, references, and POCs where available.