2026年9月4日

CVE-2026-74893 [HIGH] – openssl_encrypt versions before 1.4.0 contain hardcoded default JWT signing secrets in con

未分类

📑 文章目录

openssl_encrypt versions before 1.4.0 contain hardcoded default JWT signing secrets in config.py that pass validation checks. Attackers with access to source code can forge valid JWT tokens for any client_id to gain authenticated access to keyserver and telemetry APIs.

相关文章