VYPR

Chaterm

by Chaterm

CVEs (1)

  • CVE-2026-105292MedOct 5, 2026
    risk 0.31cvss 5.9epss —

    Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth state validation. Attackers can trigger a crafted callback with attacker-controlled userInfo from a…