https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 16:14:39 +0000 https://db.gcve.eu/vuln/cve-2026-125362 <p><strong>Affected:</strong> haiwen seahub</p> <p>Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post() that generates batch share link passwords using Python&#39;s non-cryptographic random.choices(). Authenticated users permitted to create share links can request many generated passwords via the multi-share-links batch endpoint, recover the Mersenne Twister state, and predict other users&#39; share link passwords.</p> <p><strong>Affected:</strong> haiwen seahub</p> <p>Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post() that generates batch share link passwords using Python&#39;s non-cryptographic random.choices(). Authenticated users permitted to create share links can request many generated passwords via the multi-share-links batch endpoint, recover the Mersenne Twister state, and predict other users&#39; share link passwords.</p> https://db.gcve.eu/vuln/cve-2026-125362