RSEC-2026-0
See a problem?- Import Source
- https://github.com/RConsortium/r-advisory-database/blob/main/vulns/widgetframe/RSEC-2026-0.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/RSEC-2026-0
- Upstream
- Published
- 2026-02-18T10:30:00Z
- Modified
- 2026-02-18T22:30:36.922343Z
- Summary
- Cross-site Request Forgery (CSRF) vulnerability
- Details
-
The widgetframe R package is exposed to a vulnerability due to its use of the Pym.js library version 1.3.1. This can result in arbitrary javascript code execution.
- References
Affected packages
CRAN / widgetframe
Package
- Name
- widgetframe
- Purl
- pkg:cran/widgetframe