Threats tagged 'ghsa-wmj3-p5xf-h898'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-38601codeskyblue gohttpserver · Hardcoded Session Secret Key High2026-11-03GCVE DatabaseCVE-2026-38601 A vulnerability in codeskyblue gohttpserver through version 1.3.0 involves a hardcoded session secret key. This flaw allows attackers to impersonate any user by forging session cookies, bypassing OpenID Connect authentication and gaining access to all controls. Report on CVE-2026-38601 Vulnerability #ghsa-wmj3-p5xf-h898	GCVE Database	2026-11-03

Page 1 of 1