dyad vulnerabilities

CVEs whose affected-version data names the dyad package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111988Medium· 4.3

yesterday

dyad-sh dyad OAuth Callback cross-site request forgery

A security flaw has been discovered in dyad-sh dyad up to 1.16.0. Affected by this issue is some unknown functionality of the component OAuth Callback Handler. Performing a manipulation results in cross-site request forgery. The attack m…

▾ Sunlitdyad-sh · dyadEPSS 0.20%via CVEORG