A vulnerability identified as problematic has been detected in redwoodjs sdk up to 1.0.5. Affected is the function serverAction of the component GET Request Handler. Performing a manipulation results in cross-site request forgery.

This vulnerability is cataloged as CVE-2026-39371. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.