EUVD-2021-0584

Malware in sbrugna...

Weak JSON Web Token in yapi-vendor

Weak JSON Web Token JWT signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users' JWT tokens. This occurs because Math.random in Node.js is used as a source of randomness in jwt signing. Math.random does not provide cryptographically secure random numbers. This has be...

CVE-2021-27884

Weak JSON Web Token JWT signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users' JWT tokens. This occurs because Math.random in Node.js is used...

YMFE YApi 安全特征问题漏洞

Sean1025 YMFE YApi is Sean1025 an open source application . Provides a visual interface management platform YMFE YApi through 1.9.2 A security vulnerability exists that allows the recreation of JWT tokens for other users...