What’s Vulnerable › Vulnerabilities

CVE-2023-53951: Ever Gauzy v0.281.9 JWT Authentication Weakness via HMAC Secret

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-19 · updated 2026-06-17
• Weakness: CWE-347

Description

Ever Gauzy v0.281.9 contains a JWT authentication vulnerability that allows attackers to exploit weak HMAC secret key implementation. Attackers can leverage the exposed JWT token to authenticate and gain unauthorized access with administrative permissions.

Affected products

• Gauzy ever gauzy: 0.281.9

References

• https://github.com/ever-co/ever-gauzy
• https://www.exploit-db.com/exploits/51354
• https://www.vulncheck.com/advisories/ever-gauzy-jwt-authentication-weakness-via-hmac-secret

Get alerted when CVE-2023-53951 or the next vulnerability affects your stack