Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/26 8:44 p.m.11 views

turso-cli persists Turso platform JWT with world-readable (0o644) file permissions

Summary turso-cli persists the user's Turso platform JWT to settings.json using Viper's default configPermissions of 0o644, leaving the credential file world-readable on standard Linux and macOS systems. Any other local UID on the host can read the file and recover the platform JWT, which grants...

5.6AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder