CVE-2026-28678 - Vulnerability Analysis

Overview

DSA Study Hub contains an insufficiently protected credentials vulnerability caused by storing JWT authentication tokens in HTTP cookies without cryptographic payload protection, letting attackers potentially access sensitive authentication data, exploit requires interception of cookies.

Severity & Score

Impact

Attackers can access authentication tokens, potentially leading to account compromise or unauthorized access.

Mitigation

Update to the version including commit d527fba or later.

References

• https://github.com/toxicbishop/DSA-with-tsx/commit/d527fba3b3c15f185b9d1e730322dff9248391e4
• https://github.com/toxicbishop/DSA-with-tsx/security/advisories/GHSA-vmxr-562h-rcgg

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner