Threats tagged 'ghsa-qp3g-4h67-f237'

A critical vulnerability (CVE-2026-14804) exists in Bilin Software and Informatics Consultancy Inc.'s HUMANIST Digital Human Resources software versions from 26.0 up to but not including 26.1. The issue involves the use of a hard-coded cryptographic key, which allows an attacker to read sensitive constants within the executable. This vulnerability has a CVSS 3.1 base score of 9.1, indicating high impact on confidentiality and integrity without requiring privileges or user interaction.