CVE-2026-57183

Prior to version 1.69.1 , the Scoold Q&A and knowledge-sharing platform is vulnerable to unauthorized access due to improper authentication in the checkApiAuth() function. Specifically, the component at src/main/java/com/erudika/scoold/utils/ScooldUtils.java accepts JWTs signed with app_secret_ke...