GHSA-mv7p-34fv-4874PublishedWithdrawn
nocobase JWT Service jwt-service.ts hard-coded key
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-13877 · Microsoft / collected KEV context
cve-program · CVE-2025-13877
- https://vuldb.com/?id.334033
- https://vuldb.com/?ctiid.334033
- https://vuldb.com/?submit.692205
- https://gist.github.com/H2u8s/f3ede60d7ecfe598ae452aa5a8fbb90d
euvd · EUVD-2025-200266
- https://vuldb.com/?id.334033
- https://vuldb.com/?ctiid.334033
- https://vuldb.com/?submit.692205
- https://gist.github.com/H2u8s/f3ede60d7ecfe598ae452aa5a8fbb90d
nvd · CVE-2025-13877
- https://gist.github.com/H2u8s/f3ede60d7ecfe598ae452aa5a8fbb90d
- https://vuldb.com/?ctiid.334033
- https://vuldb.com/?id.334033
- https://vuldb.com/?submit.692205
osv · GHSA-644f-hrff-mf96
- https://nvd.nist.gov/vuln/detail/CVE-2025-13877
- https://gist.github.com/H2u8s/f3ede60d7ecfe598ae452aa5a8fbb90d
- https://vuldb.com/?ctiid.334033
- https://vuldb.com/?id.334033
- https://vuldb.com/?submit.692205
osv · GHSA-mv7p-34fv-4874
- https://github.com/nocobase/nocobase/security/advisories/GHSA-mv7p-34fv-4874
- https://nvd.nist.gov/vuln/detail/CVE-2025-13877
- https://github.com/nocobase/nocobase/commit/de4292ea7847dd26c6306445091769f8b9ee96d5
- https://docs.nocobase.com/welcome/getting-started/installation/docker-compose
- https://gist.github.com/H2u8s/f3ede60d7ecfe598ae452aa5a8fbb90d
- https://github.com/nocobase/nocobase
- https://github.com/nocobase/nocobase/blob/main/docker/app-mariadb/docker-compose.yml#L13
- https://github.com/nocobase/nocobase/blob/main/docker/app-mysql/docker-compose.yml#L13
- https://github.com/nocobase/nocobase/blob/main/docker/app-postgres/docker-compose.yml#L11
- https://github.com/nocobase/nocobase/blob/main/docker/app-sqlite/docker-compose.yml#L11
- https://v2.docs.nocobase.com/get-started/installation/docker
- https://vuldb.com/?ctiid.334033
- https://vuldb.com/?id.334033
- https://vuldb.com/?submit.692205
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.