[漏洞] 存在可能导致权限越界风险的硬编码 JWT 密钥

作者: lx915创建于 2026年7月20日更新于 2026年7月21日

Description: This project is an open source project, and any user can access the hard-coded JWT Secret in the project. At the same time, there are no warnings when the project is started using the default value of the JWT Secret, so most users may not modify this default JWT Secret value, which may lead to attackers forging a permission token for any user, bypassing authentication and authorization mechanisms, and accessing protected interfaces.

内容来源: eddycjy/go-gin-example