18 matches found
CVE-2026-61737
ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default JWT secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any use...
CVE-2026-61737 ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin
ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default JWT secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any use...
EUVD-2026-114000
ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default JWT secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any use...
CVE-2026-61737
The ng-antd-admin administration system template (Angular and NestJS) is vulnerable to authentication bypass due to a hardcoded default JWT secret in versions prior to 22.0 . If a deployment fails to replace this default secret, an attacker can forge tokens to impersonate any user, including admi...
CVE-2026-61737 ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin
ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default JWT secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any use...
CVE-2026-61737 ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin
ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default JWT secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any use...
CVE-2026-61737: huajian123 ng-antd-admin: ng-antd-admin is an Angular and NestJS administration system template
ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default JWT secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any use...
PT-2026-133609
ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default JWT secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any use...
AntD Admin - Sensitive Information Disclosure Detection
AntD Admin has a security vulnerability that stems from Antd-admin 5.5.0 being affected by an incorrect access control vulnerability. Attackers can exploit this vulnerability to gain unauthorized access to some front-end interfaces, resulting in the leakage of sensitive information such as user...
EUVD-2021-33054
Malicious code in bioql PyPI...
CVE-2021-46371
antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information...
CVE-2021-46371
antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information...
CVE-2021-46371
antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information...
Improper access control
antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information...
CVE-2021-46371
antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information...
CVE-2021-46371
CVE-2021-46371 affects the frontend framework AntD-Admin (version 5.5.0). The NVD description states an incorrect access control vulnerability that allows unauthorized access to certain foreground interfaces, leading to leakage of sensitive information. The CVSS data indicates a high impact for t...
CVE-2021-46371: Missing Authentication for Critical Function
antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information...
PT-2022-12677
Name of the Vulnerable Software and Affected Versions antd-admin version 5.5.0 Description The issue is related to incorrect access control, allowing unauthorized access to certain interfaces, which can lead to the leakage of sensitive information. Recommendations For antd-admin version 5.5.0, at...