ng-antd-admin vulnerabilities

CVEs whose affected-version data names the ng-antd-admin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-61737Critical· 9.8

6d ago

ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin

ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default `JWT` secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker ca…

▾ Midnighthuajian123 · ng-antd-adminEPSS 0.51%via CVEORG