Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/18 2:27 p.m.15 views

praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)

Affected: praisonai-platform PyPI CWE-287 Improper Authentication Overview GHSA-3qg8-5g3r-79v5 Critical reported that praisonai-platform's JWT signing secret defaulted to the hardcoded literal "dev-secret-change-me", and that the production guard meant to prevent this was default-open it only...

5.7AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder