Vulnerabilities
Hard-Coded JWT Secret in FastapiAdmin 3.0 Allows Superuser Impersonation
A flaw in FastapiAdmin through version 3.0 exposes a static signing key, enabling registered users to forge tokens and assume superuser privileges.
API Security
Everything Firewall Scoop has reported about API Security: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVE-2026-68582: Vikunja 2.4.0 Patches Critical IDOR Exposing User Data via Share Links
A critical identity flaw in Vikunja versions prior to 2.4.0 lets attackers use valid share links to scrape task data and user details from any project on the server.