Skip to content
OpenAdvisories

Vendor

MohibShaikh

1 known vulnerabilities.

Products

clawvet 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-62241

    clawvet < 0.7.5 Hard-coded JWT Secret Session Forgery

    clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-dev-secret-change-me') in auth.ts and ships it as the default in .env.example. Because GET /api/v1/scans returns scan records containing userId values without au…

    MohibShaikh clawvet