decolua/9router Hardcoded JWT Secret Authentication Bypass (CVE-2026-66339)

github.com 2026-07-16查看中文 →

Security AdvisoryCriticaldecolua

Affected:

decolua/9router >=0.2.21, <=0.4.41

Fixed in:

>=0.4.44

Referenced CVEs: CVE-2026-49352 · 9.8

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

LettaBot Unauthenticated Access Vulnerability Report: Shared Mode Metadata Exposure (CWE-308) 2026-08-06 NanoClaw Arbitrary Local File Read via send_file Path Traversal (CVE-2026-29611) 2026-08-06 Hermes Agent memory toolset bypasses disabled_toolsets configuration 2026-08-06 hermes-agent: Memory tool injection bypassing disabled_toolsets 2026-08-06 IronClaw Approval Bypass in shell Tool via Newline Chaining (#4861) 2026-08-06

Offline Archive

Offline screenshot & PDF are Pro-exclusive