https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 17:06:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-25732 EUVD-2026-25732 https://cve.radiocsirt.org/vuln/euvd-2026-25732 https://cve.radiocsirt.org/vuln/fkie_cve-2021-27884 <p>Weak JSON Web Token (JWT) signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users&#39; JWT tokens. This occurs because Math.random in Node.js is used.</p> <p>Weak JSON Web Token (JWT) signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users&#39; JWT tokens. This occurs because Math.random in Node.js is used.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-27884 https://cve.radiocsirt.org/vuln/ghsa-2h3h-vw8r-82rp <p><strong>Affected:</strong> npm: yapi-vendor</p> <p>Weak JSON Web Token (JWT) signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users&#39; JWT tokens. This occurs because Math.random in Node.js is used as a source of randomness in jwt signing. Math.random does not provide cryptographically secure random numbers. This has been patched in version 1.9.3.</p> <p><strong>Affected:</strong> npm: yapi-vendor</p> <p>Weak JSON Web Token (JWT) signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users&#39; JWT tokens. This occurs because Math.random in Node.js is used as a source of randomness in jwt signing. Math.random does not provide cryptographically secure random numbers. This has been patched in version 1.9.3.</p> https://cve.radiocsirt.org/vuln/ghsa-2h3h-vw8r-82rp https://cve.radiocsirt.org/vuln/gsd-2021-27884 gsd-2021-27884 https://cve.radiocsirt.org/vuln/gsd-2021-27884