[ Vendor · 1 CVEs ]
mher
CVEs affecting mher published in the last 30 days, plus any mher CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2022-51020 | 12 Oct 2026 | CVSS 5.9 | mher flowerFlower before 2.2.0 contains a cross-site request forgery vulnerability because Tornado xsrf_cookies is disabled and the OAuth session cookie lacks… |