Skip to content

AnyCable: Pusher REST API Does Not Verify Request Body MD5 Enabling Signed-Request Replay with Arbitrary Body

Moderate severity GitHub Reviewed Published Jun 30, 2026 in anycable/anycable • Updated Sep 18, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts