VYPR

Suna

by Kortix AI

CVEs (1)

  • CVE-2026-12811Jun 21, 2026
    risk 0.00cvss epss

    A weakness has been identified in kortix-ai suna up to 0.8.38. Affected by this issue is the function router.replace/router.push of the file apps/frontend/src/app/auth/page.tsx of the component Auth Endpoint. Executing a manipulation of the argument returnURL can lead to cross…