next: Next.js: null origin can bypass Server Actions CSRF checks
Next.js: null origin can bypass Server Actions CSRF checks (moderate). GHSA-mq59-m269-xvcx, CVE-2026-27978.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
Next.js: null origin can bypass Server Actions CSRF checks
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?