CVE-2026-115400

Versions of crawlseo prior to 0.2.5 are vulnerable to a cleartext storage flaw (CWE-312). The application stores Google OAuth access and refresh tokens unencrypted within the User.googleTokens column of a Postgres database . An attacker with database read access can extract these plaintext long-l...