https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T22:43:11.403758+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-160933 EUVD-2026-160933 2026-10-08T22:43:11.406473+00:00 EUVD-2026-160933 https://cve.radiocsirt.org/vuln/fkie_cve-2023-46943 fkie_cve-2023-46943 2026-10-08T22:43:11.406783+00:00

An issue was discovered in NPM's package @evershop/evershop before version 1.0.0-rc.8. The HMAC secret used for generating tokens is hardcoded as "secret". A weak HMAC secret poses a risk because attackers can use the predictable secret to create valid JSON Web Tokens (JWTs), allowing them access to important information and actions within the application.

 https://cve.radiocsirt.org/vuln/ghsa-32r3-57hp-cgfw GHSA-32r3-57hp-cgfw — EverShop at risk to unauthorized access via weak HMAC secret 2026-10-08T22:43:11.406821+00:00

Affected: npm: @evershop/evershop

An issue was discovered in NPM's package @evershop/evershop before version 1.0.0-rc.9. The HMAC secret used for generating tokens is hardcoded as "secret". A weak HMAC secret poses a risk because attackers can use the predictable secret to create valid JSON Web Tokens (JWTs), allowing them access to important information and actions within the application.

 https://cve.radiocsirt.org/vuln/gsd-2023-46943 gsd-2023-46943 2026-10-08T22:43:11.406849+00:00 gsd-2023-46943