{"id":"CVE-2023-31581","details":"Dromara Sureness before v1.0.8 was discovered to use a hardcoded key.","aliases":["GHSA-3j2f-58rq-g6p7"],"modified":"2026-08-12T03:51:41.521849331Z","published":"2023-10-24T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/31xxx/CVE-2023-31581.json"},"references":[{"type":"WEB","url":"https://github.com/xubowenW/JWTissues/blob/main/sureness%20secure%20issues.md"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/31xxx/CVE-2023-31581.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31581"},{"type":"REPORT","url":"https://github.com/dromara/sureness/issues/164"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/dromara/sureness","events":[{"introduced":"0"},{"fixed":"68aa46044e174f5509db738794dfa4ea49b37aff"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"v1.0.8"},{"fixed":"1.0.8"}],"source":["DESCRIPTION","CPE_RANGE"],"cpe":"cpe:2.3:a:dromara:sureness:*:*:*:*:*:*:*:*"}}],"versions":["sureness-root-1.0.7","sureness-starter-1.0.6","sureness-starter-1.0.5","sureness-root-1.0.5","sureness-root-1.0.4-beta.1","sureness-root-1.0.4-beta","sureness-root-1.0.4","sureness-root-1.0.3","sureness-root-1.0.2","sureness-root-1.0.1","sureness-root-1.0.0","sureness-root-0.4.6","sureness-root-0.4.5","sureness-root-0.4.4","sureness-root-0.4.3","sureness-root-0.4.2","sureness-root-0.4.1","sureness-root-0.4","sureness-root-0.3","sureness-root-0.2","sureness-root-0.1","sureness-root-0.0.2.8","sureness-root-0.0.2.8-pre","sureness-root-0.0.2.7","sureness-root-0.0.2.6","sureness-root-0.0.2.4","sureness-root-0.0.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-31581.json"}}],"schema_version":"1.9.0"}