CVE-2026-111988 | dyad-sh dyad up to 1.16.0 OAuth Callback cross-site request forgery (GHSA-pqj5-w36j-2839)

October 17, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in dyad-sh dyad up to 1.16.0. Affected by this issue is some unknown functionality of the component OAuth Callback Handler. Performing a manipulation results in cross-site request forgery.

This vulnerability was named CVE-2026-111988. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More