https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T18:48:48.218726+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-125758 CVE-2026-125758 — Aptabase before commit 61d4c01 Authentication Bypass via Known Example AUTH_SECRET 2026-11-13T18:48:48.220427+00:00

Affected: aptabase

Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by using the publicly known example AUTH_SECRET. Attackers can enumerate registered e-mails via /api/_auth/signin, forge HS256 JWTs redeemed by /api/_auth/continue, impersonate users, export analytics data, and transfer app ownership.