GitHub advisory GHSA-hc5j-q32w-c25v
Server-controlled `__next` URL is not checking cross-origin
MediumCVSS 5.9No SAP products impacted
- CVE(s)
- CVE-2026-66773
- CVSS vector
- CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
Affected products and versions
- Product No SAP products impacted
- Library pyodata (pip)
Versions: < 1.11.2
Appears in
Patch Days listing this note, newest first.
- August 2026NewMediumCVSS 5.9