提交 #602368: gooaclok819 sublinkX 1.8 Improper Access Controls

The JWT secret key is hardcoded in the source code, making it easy for an attacker to forge valid JWT tokens and bypass authentication mechanisms.
Details can be found in https://github.com/gooaclok819/sublinkX/issues/68.

• 来源: ⚠️ https://github.com/gooaclok819/sublinkX/issues/68
• 用户: Tritium (UID 50779)
• 提交: 2025-06-22 16時22分 (1 年前)
• 管理: 2025-06-27 12時52分 (5 days later)
• 状态: 已接受
• VulDB条目: 313882 [gooaclok819 sublinkX 直到 1.8 middlewares/jwt.go 弱加密]
• 积分: 18