MohibShaikh vulnerabilities
We track 1 vulnerability in MohibShaikh products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 17, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest MohibShaikh vulnerabilities
- 9.1 Critical severity
clawvet: Missing Authentication for Critical Functionality
clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-dev-secret-change-me') in auth.ts and ships it as the default in .env.example. Because GET /api/v1/scans returns scan records containing userId values without aut