infinity_for_reddit vulnerabilities

CVEs whose affected-version data names the infinity_for_reddit package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116072Medium· 5.4

yesterday

Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity

Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCustomTabActivity redirect handler check…

▾ SunlitDocile-Alligator · Infinity for Redditvia CVEORG