#cwe-326

共收录 43 条相关情报。

← 返回所有主题

漏洞预警2026-05-13 发布INFO

fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.2.4, a critical authentication-bypass vulnerability in fast-jwt's async key-resolver flow allows any unaut...

CVE-2026-44351

fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.2.4, a critical authentication-bypass vulnerabili

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-326 #cwe-1391

漏洞预警2026-05-11 发布INFO

In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and related white-label apps (<= 1.8.x), baby monitor ".jp...

CVE-2026-33361

In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), a

历史摘要 · 未重新核验 · NVD

安全公告2026-05-07 发布INFO

Note Mark has a JWT Secret Weakness that allows Full Account Takeover via Token Forgery

CVE-2026-44523

#### Summary No minimum length or entropy is enforced on the `JWT_SECRET` configuration value. The application accepts

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-326 #cwe-345 #severity:critical