https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:42:32.114851+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-35669 cnvd-2024-35669 2026-10-09T20:42:32.117860+00:00 cnvd-2024-35669 https://cve.radiocsirt.org/vuln/euvd-2026-216934 EUVD-2026-216934 2026-10-09T20:42:32.117894+00:00 EUVD-2026-216934 https://cve.radiocsirt.org/vuln/fkie_cve-2023-48396 fkie_cve-2023-48396 2026-10-09T20:42:32.117909+00:00

Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can forge any token to log in any user.

Attacker can get secret key in /seatunnel-server/seatunnel-app/src/main/resources/application.yml and then create a token. This issue affects Apache SeaTunnel: 1.0.0.

Users are recommended to upgrade to version 1.0.1, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-cp2c-x2pc-fph7 GHSA-cp2c-x2pc-fph7 — Apache SeaTunnel Web Authentication vulnerability 2026-10-09T20:42:32.117942+00:00

Affected: Maven: org.apache.seatunnel:seatunnel-web

Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can forge any token to log in any user.

Attacker can get secret key in /seatunnel-server/seatunnel-app/src/main/resources/application.yml and then create a token. This issue affects Apache SeaTunnel: 1.0.0.

Users are recommended to upgrade to version 1.0.1, which fixes the issue.

 https://cve.radiocsirt.org/vuln/gsd-2023-48396 gsd-2023-48396 2026-10-09T20:42:32.117968+00:00 gsd-2023-48396