Note Mark has a JWT Secret Weakness that allows Full Account Takeover via Token Forgery
Critical severity
GitHub Reviewed
Published
May 2, 2026
in
enchant97/note-mark
•
Updated May 15, 2026
Give feedback on Dependabot alerts