CVE-2026-19636
Medium · 5.3CVSS
5.3
EPSS
0.3%
Published
Aug 14, 2026
CISA due date
—
The record
An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|