https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:54:08.177730+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-109086 EUVD-2026-109086 2026-10-08T10:54:08.180470+00:00 EUVD-2026-109086 https://cve.radiocsirt.org/vuln/fkie_cve-2013-7222 fkie_cve-2013-7222 2026-10-08T10:54:08.180500+00:00

config/initializers/secret_token.rb in Fat Free CRM before 0.12.1 has a fixed FatFreeCRM::Application.config.secret_token value, which makes it easier for remote attackers to spoof signed cookies by referring to the key in the source code.

 https://cve.radiocsirt.org/vuln/ghsa-g897-cgfc-7q8v GHSA-g897-cgfc-7q8v — Fat Free CRM has fixed token value 2026-10-08T10:54:08.180530+00:00

Affected: RubyGems: fat_free_crm

`config/initializers/secret_token.rb` in Fat Free CRM before 0.12.1 has a fixed `FatFreeCRM::Application.config.secret_token` value, which makes it easier for remote attackers to spoof signed cookies by referring to the key in the source code.

 https://cve.radiocsirt.org/vuln/gsd-2013-7222 gsd-2013-7222 2026-10-08T10:54:08.180553+00:00 gsd-2013-7222