Threats affecting pkg:github/kubero-dev/kubero

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-125370kubero · Use of Hard-coded Cryptographic Key Critical9.32026-11-09CVE Database V5CVE-2026-125370 Kubero versions 3.0.0 through 3.1.1 contain an authentication bypass vulnerability due to a hardcoded fallback JWT signing secret. When the JWT_SECRET environment variable is unset, attackers can forge administrative JWT tokens with arbitrary claims, gaining control over pipelines, applications, users, and API tokens. Vulnerability kubero-dev	CVE Database V5	2026-11-09

Page 1 of 1 · 1 duplicate CVE record merged