Buqiyuan vulnerabilities
We track 1 vulnerability in Buqiyuan products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Buqiyuan vulnerabilities
- 9.8 Critical severity
nest-admin: Use of Hard-coded Cryptographic Key
nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtSt