Skip to content
OpenAdvisories

Package · npm

flood

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    GHSA-r587-7jh2-4qr3

    Server secret was included in static assets and served to clients

    ### Impact Server JWT signing secret was included in static assets and served to clients. This ALLOWS Flood's builtin authentication to be bypassed. Given Flood is granted access to rTorrent's SCGI interface (which is unprotected and ALLOWS arbitrary code exe…

    flood npm