Skip to content
OpenAdvisories

Vendor

xiaonuobase

1 known vulnerabilities.

Products

Snowy 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-110214

    Snowy 3.6.5 Hard-coded Download Signature Key Allows Unauthenticated File Download

    Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge download signatures for the /dev/file/download endpoint by using the published FILE_DOWNLOAD_SIGN_SECRET constant. Attackers can compute HMAC-SHA256 signat…

    xiaonuobase Snowy