https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 10:54:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-109086 EUVD-2026-109086 https://cve.radiocsirt.org/vuln/euvd-2026-109086 https://cve.radiocsirt.org/vuln/fkie_cve-2013-7222 <p>config/initializers/secret_token.rb in Fat Free CRM before 0.12.1 has a fixed FatFreeCRM::Application.config.secret_token value, which makes it easier for remote attackers to spoof signed cookies by referring to the key in the source code.</p> <p>config/initializers/secret_token.rb in Fat Free CRM before 0.12.1 has a fixed FatFreeCRM::Application.config.secret_token value, which makes it easier for remote attackers to spoof signed cookies by referring to the key in the source code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-7222 https://cve.radiocsirt.org/vuln/ghsa-g897-cgfc-7q8v <p><strong>Affected:</strong> RubyGems: fat_free_crm</p> <p>`config/initializers/secret_token.rb` in Fat Free CRM before 0.12.1 has a fixed `FatFreeCRM::Application.config.secret_token` value, which makes it easier for remote attackers to spoof signed cookies by referring to the key in the source code.</p> <p><strong>Affected:</strong> RubyGems: fat_free_crm</p> <p>`config/initializers/secret_token.rb` in Fat Free CRM before 0.12.1 has a fixed `FatFreeCRM::Application.config.secret_token` value, which makes it easier for remote attackers to spoof signed cookies by referring to the key in the source code.</p> https://cve.radiocsirt.org/vuln/ghsa-g897-cgfc-7q8v https://cve.radiocsirt.org/vuln/gsd-2013-7222 gsd-2013-7222 https://cve.radiocsirt.org/vuln/gsd-2013-7222