GO-2026-5876 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips...

CVE-2025-49001

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret verification does not take effect successfully, so a user can use any secret to forge a JWT token. The vulnerability has been fixed in v2.10.10. No known workarounds are available...

CVE-2025-49001

creationtimestamp| type| source ---|---|--- 2025-06-04 00:36:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqqksqdlyv2o 2025-06-06 03:51:16+00:00| seen| https://bsky.app/profile/bilaltariq01.bsky.social/post/3lqvwm725bf2y 2025-06-06 08:27:04+00:00| seen|...

CVE-2025-49001

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret verification does not take effect successfully, so a user can use any secret to forge a JWT token. The vulnerability has been fixed in v2.10.10. No known workarounds are available...