| Package | Affected versions | Patched versions |
|---|---|---|
| bevy | ≤ 2025-06-24 |
The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows CSRF to delete all notifications via the /notifications/delete/ URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free