https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 06 Nov 2026 23:30:52 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-39039 <p>In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and session ID in the browser&#39;s localStorage, which is fully accessible to any JavaScript running on the page.</p> <p>In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and session ID in the browser&#39;s localStorage, which is fully accessible to any JavaScript running on the page.</p> https://db.gcve.eu/vuln/fkie_cve-2026-39039 https://db.gcve.eu/vuln/ghsa-g88j-h94f-r5jp <p>In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and session ID in the browser&#39;s localStorage, which is fully accessible to any JavaScript running on the page.</p> <p>In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and session ID in the browser&#39;s localStorage, which is fully accessible to any JavaScript running on the page.</p> https://db.gcve.eu/vuln/ghsa-g88j-h94f-r5jp