Threats affecting pkg:github/ape-volo-admin

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-120442xianhc ape-volo-admin · Use of Default Cryptographic Key Critical9.32026-11-02CVE Database V5CVE-2026-120442 ape-volo-admin versions before 3.6.1 have an authentication bypass vulnerability due to a hardcoded JWT signing key in appsettings.json. This allows unauthenticated attackers to forge administrator tokens and gain full API control over users, roles, permissions, and data. The vulnerability is fixed in version 3.6.1. Vulnerability	CVE Database V5	2026-11-02

Page 1 of 1