topoteretes cognee JWT Signing Key get_api_auth_backend.py get_user_id_by_email hard-coded credentials

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-105141 · Microsoft / collected KEV context

cve-program · CVE-2026-105141

• https://vuldb.com/vuln/413365
• https://vuldb.com/vuln/413365/cti
• https://vuldb.com/cve/CVE-2026-105141
• https://vuldb.com/submit/944531
• https://github.com/topoteretes/cognee/pull/5062
• https://linear.app/cognee/issue/SDK-720/replace-the-super-secret-fallback-for-token-signing-secrets-with-a-per
• https://github.com/topoteretes/cognee/commit/fa65fc0cd86cdba48d19aa76e36be862be982f5d
• https://github.com/topoteretes/cognee/releases/tag/v1.6.0
• https://github.com/topoteretes/cognee/

No related operational record is retained in the current change model.