rwsdk vulnerabilities (npm)

2 vulnerabilities.

• rwsdk npm RedwoodSDK: Same-site CSRF in in server actions CVE-2026-42190 Fix available 5.3 MediumApril 24, 2026
• rwsdk npm RedwoodSDK has a CSRF vulnerability in server function dispatch via GET requests CVE-2026-39371 Public exploitFix available 8.1 HighApril 7, 2026