CVE-2026-111988Published
dyad-sh dyad OAuth Callback cross-site request forgery
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-111988 · Microsoft / collected KEV context
cve-program · CVE-2026-111988
- https://vuldb.com/vuln/421654
- https://vuldb.com/vuln/421654/cti
- https://vuldb.com/cve/CVE-2026-111988
- https://vuldb.com/submit/1007180
- https://github.com/dyad-sh/dyad/security/advisories/GHSA-pqj5-w36j-2839
- https://github.com/dyad-sh/dyad/pull/4433
- https://github.com/dyad-sh/dyad/commit/39fbae87b38573616a1a3b152cdb292787bb1109
- https://github.com/dyad-sh/dyad/releases/tag/v1.17.0-beta.1
- https://github.com/dyad-sh/dyad/
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.