> Search

2 results for “jwt”

SecurityNew

Critical Hard-Coded Secret Flaw Found in clawvet API Server

A hard-coded JWT secret in clawvet API versions before 0.7.5 allows unauthenticated remote attackers to forge session cookies and steal sensitive user data.

1 hour ago

SecurityNew

Clawvet API Hard-Coded JWT Secret Exposes User Data

A critical vulnerability in the Clawvet self-hosted API server allows unauthenticated attackers to forge session cookies and hijack user accounts.

3 hours ago