Following from #3619146: August 2026 CVEs we need to file CVEs for this month.

Comments

greggles created an issue.

elc’s picture

elc commented

CAS Server 2026-September-09

  • CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
  • CAPEC-194 Fake the Source of Data
"https://www.drupal.org/sa-contrib-2026-135": {"project": "cas_server", "CWE": "601", "CWE-DESC": "URL Redirection to Untrusted Site ('Open Redirect')",  "CAPEC": "194", "CAPEC-DESC": "Fake the Source of Data"},