A vulnerability identified as problematic has been detected in redwoodjs sdk up to 1.0.5. Affected is the function
serverAction of the component GET Request Handler. Performing a manipulation results in cross-site request forgery.
This vulnerability is cataloged as CVE-2026-39371. It is possible to initiate the attack remotely. There is no exploit available.
You should upgrade the affected component.