Description
Dromara Sureness before v1.0.8 was discovered to use a hardcoded key.
Remediation
References
https://github.com/dromara/sureness/issues/164
https://github.com/xubowenW/JWTissues/blob/main/sureness%20secure%20issues.md
Related Vulnerabilities
CVE-2020-15500 Vulnerability in npm package tileserver-gl
CVE-2021-23352 Vulnerability in npm package madge
CVE-2023-28155 Vulnerability in maven package org.webjars.bower:request
CVE-2021-43797 Vulnerability in maven package io.netty:netty-codec-http
CVE-2018-18854 Vulnerability in maven package io.spray:spray-json