Threats tagged 'ghsa-mmvv-wwj3-vgj8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-117564nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge Critical9.32026-10-27GCVE DatabaseCVE-2026-117564 nest-admin versions before 1.0.1 have an authentication bypass vulnerability due to a hardcoded JWT secret in the production environment file. This allows unauthenticated attackers to forge administrator tokens and impersonate any user or claim admin roles, gaining full administrative access. Report on CVE-2026-117564 Vulnerability CWE-321 #ghsa-mmvv-wwj3-vgj8	GCVE Database	2026-10-27

Page 1 of 1