CVE-2026-46513: Plaintext Token Database Storagecve-2026-46513-plaintext-token-database-storage
A cryptographic token generated securely or retrieved from an incoming request is stored or verified in the database in plaintext. If the database leaks, an attacker can leverage these active tokens for unauthorized access. Always hash active authentication tokens (e.g., using SHA-256) before storing or verifying them in the database.
