Skip to content
OpenAdvisories

Package · Go

github.com/dhax/go-base

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-48031

    Go Restful API Boilerplate: Hardcoded JWT Secret "random" Allows Token Forgery

    go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed by PostgreSQL. In versions prior to 2026-05-18, the JWT signing secret is hardcoded to the known string "random", letting any attacker who reads the public repository forge token…

    dhax go-base github.com/dhax/go-base Go