> CVE-2026-3076

« BACK_TO_HOME
PUBLISHED
2026-03-03 23:15
MODIFIED
2026-03-03 23:15
DATA SOURCES:
NVD 🔗 2026-03-04 GITHUB 🔗 2026-11-05

> DESCRIPTION

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-2363. Reason: This candidate is a reservation duplicate of CVE-2026-2363. Notes: All CVE users should reference CVE-2026-2363 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-mcww-4hxq-hfr3 HIGH

LightRAG: Hardcoded JWT Signing Secret Allows Authentication Bypass

AFFECTED PACKAGES:
PIP / lightrag-hku
<= 1.4.12
Fixed in: 1.4.13

> HISTORIQUE DES MODIFICATIONS

Première apparition
03/03/2026 23:15
Source: NVD
Total des modifications: 0 Dernière mise à jour: 8 months ago
« BACK_TO_HOME