{"id":"GO-2025-4269","revision":"092d10ddef1a457285d1d6de5c182782","records":[{"revision":"092d10ddef1a457285d1d6de5c182782","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4269","aliases":["CVE-2025-15107","GHSA-43h9-hc38-qph5"],"title":"SQLE's JWT Secret Handler can be manipulated to use hard-coded cryptographic key in github.com/actiontech/sqle","description":"SQLE's JWT Secret Handler can be manipulated to use hard-coded cryptographic key in github.com/actiontech/sqle","state":0,"publishedAt":"2026-01-12T17:39:39+00:00","modifiedAt":"2026-03-03T04:57:49.397321+00:00","affected":[{"ecosystem":"Go","name":"github.com/actiontech/sqle","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-43h9-hc38-qph5","https://nvd.nist.gov/vuln/detail/CVE-2025-15107","https://github.com/actiontech/sqle/issues/3186","https://github.com/actiontech/sqle/blob/4714f83f33e0d7aa647036eb756e928aa4174014/sqle/utils/jwt.go#L9","https://github.com/actiontech/sqle/milestone/53","https://vuldb.com/?ctiid.338478","https://vuldb.com/?id.338478","https://vuldb.com/?submit.710380"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4269","license":"OSV · upstream source license applies","key":"osv:GO-2025-4269","identifiers":["GO-2025-4269","CVE-2025-15107","GHSA-43h9-hc38-qph5"]},"retained":false,"historicalAffected":[]}],"coverage":[]}