Threats affecting pkg:github/ever-co/ever-gauzy

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.4%	CVE-2023-53951ever gauzy · Improper Verification of Cryptographic Signature Critical9.3EPSS 0.4%2025-12-19CVE Database V5CVE-2023-53951 Ever Gauzy v0.281.9 contains a JWT authentication vulnerability that allows attackers to exploit weak HMAC secret key implementation. Attackers can leverage the exposed JWT token to authenticate and gain unauthorized access with administrative permissions. EPSS 0.4%Vulnerability	CVE Database V5	2025-12-19

Page 1 of 1