Threats tagged 'ghsa-pj24-vj9g-8vg8'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.4%	CVE-2026-74893jahlives openssl_encrypt · Use of Hard-coded Credentials High8.7EPSS 0.4%2026-08-17CVE Database V5CVE-2026-74893 openssl_encrypt versions before 1.4.0 contain hardcoded default JWT signing secrets in config.py that pass validation checks. Attackers with access to source code can forge valid JWT tokens for any client_id to gain authenticated access to keyserver and telemetry APIs. EPSS 0.4%Vulnerability #ghsa-pj24-vj9g-8vg8	CVE Database V5	2026-08-17

Page 1 of 1