nest-admin vulnerabilities

1 known vulnerability in nest-admin from Buqiyuan. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  nest-admin: Use of Hard-coded Cryptographic Key

  CVE-2026-117564Oct 27, 2026Buqiyuan

  nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtSt