Cloudanix VulnDB

GHSA-644f-hrff-mf96

Medium · 5.6

CVSS

5.6

EPSS

—

Published

Dec 2, 2025

CISA due date

—

The record

Duplicate Advisory: Authentication Bypass via Default JWT Secret in NocoBase docker-compose Deployments

Affected packages

Ecosystem Package Introduced Fixed
npm @nocobase/auth 0 1.9.23

Related vulnerabilities