Description
A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | lxdui | <= 2.1.3 | — | GHSA-p4xh-4869-8vrg |
| PyPI | lxdui | all versions | — | PYSEC-2021-342 |