Description

DSA Study Hub is an interactive educational web application. Prior to commit d527fba, the user authentication system in server/routes/auth.js was found to be vulnerable to Insufficiently Protected Credentials. Authentication tokens (JWTs) were stored in HTTP cookies without cryptographic protection of the payload. This issue has been patched via commit d527fba.

INFO

Published Date :

2026-03-07T16:06:51.072Z

Last Modified :

2026-03-09T18:26:07.074Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2026-28678 vulnerability.

Vendors Products
Toxicbishop
  • Dsa-with-tsx
  • Dsa Study Hub
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-28678.

URL Resource
https://github.com/toxicbishop/DSA-with-tsx/commit/d527fba3b3c15f185b9d1e730322dff9248391e4 cve-icon cve-icon
https://github.com/toxicbishop/DSA-with-tsx/security/advisories/GHSA-vmxr-562h-rcgg cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact