CVE-2026-16216 MEDIUM

CVE-2026-16216: geex-arts django-jet OAuth cross-site request forgery

Vendor Geex-Arts
Product django-jet
Weakness CWE-352 · CSRF
Published July 19, 2026
Last update July 19, 2026

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A weakness has been identified in geex-arts django-jet up to 1.0.8. Affected is an unknown function of the component OAuth Handler. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Key dates

02Disclosure timeline

July 19, 2026 CVE published

Related vulnerabilities

04Related CVE