Known Vulnerabilities for Sa-token by Dromara
Listed below are 2 of the newest known vulnerabilities associated with "Sa-token" by "Dromara".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-104356 json | PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString() function uses the non-cry... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103651 json | MISP contains a vulnerability in its one-time password (OTP) authentication flow that allows replay of a consumed HOTP (paper... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103282 json | Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows multi... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103259 json | n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a session token leakage vulnerability in the Dynamic Credentials ... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103001 json | PyJWT is a Python implementation of JSON Web Token standards. From 2.11.0 through 2.13.0, PyJWT's PyJWT._merge_options() meth... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-102995 json | pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102828 json | simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations ... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102588 json | A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By ... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-102474 json | A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \u or \U escape, but the multi-b... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102422 json | shell-quote's `quote()` function emits a `{ comment }` token as `#` followed by its text, which comments out the rest of the ... | Not Provided | 2026-09-29 | 2026-09-30 |