—
GO-2026-5515
Go Restful API Boilerplate: Hardcoded JWT Secret "random" Allows Token Forgery in github.com/dhax/go-base
Quick fix
GO-2026-5515 — github.com/dhax/go-base: upgrade to the fixed version with the command below.
go get github.com/dhax/go-base@v0.0.0-20260517152733-cc82b9740fa6Details
Go Restful API Boilerplate: Hardcoded JWT Secret "random" Allows Token Forgery in github.com/dhax/go-base
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/dhax/go-base
Introduced in:
0Fixed in: 0.0.0-20260517152733-cc82b9740fa6Fix
go get github.com/dhax/go-base@v0.0.0-20260517152733-cc82b9740fa6