DjangoBlog up to 2.1.0.0 Hard-coded SECRET_KEY Credential Disclosure (CVE-2026-6578)

Vulnerability Overview Vulnerability Name: liangliangyy DjangoBlog up to 2.1.0.0 Setting django blog/settings.py SECRET_KEY hard-coded credentials CVE ID: CVE-2026-6578 CVSS Score: 5.1 (CVSS v3) Vulnerability Type: Hard-coded credentials Description: In version 2.1.0.0 of , the in the file is hard-coded, leading to credential leakage. Impact Scope Affected Product: DjangoBlog Affected Version: 2.1.0.0 Affected Component: Impacted Functionality: Credential leakage Remediation Plan Current Status: No specific remediation plan provided Recommended Measures: It is recommended to replace the affected object or use an alternative product Additional Information Vulnerability Discovery Time: 2026-04-19 Vulnerability Submission Time: 2026-04-20 Vulnerability Source: GitHub Vulnerability Status: Undefined Vulnerability Details Vulnerability Description: In version 2.1.0.0 of , the in the file is hard-coded, leading to credential leakage. Vulnerability Impact: Credential leakage may result in unauthorized system access. Exploitation: No specific exploit code provided. Vulnerability Scoring CVSS v3 Score: 5.1 CVSS v2 Score: 5.1 CVSS v4 Score: 5.1 Vulnerability Timeline Vulnerability Discovery Time: 2026-04-19 Vulnerability Submission Time: 2026-04-20 Vulnerability Status: Undefined Vulnerability Source Vulnerability Source: GitHub Vulnerability Status: Undefined Vulnerability Submission Submitter: Dem0 Submission Time: 2026-04-20 Vulnerability Discussion Discussion Status: No comments Vulnerability Subscription Subscription Method: Enable email alert feature Vulnerability Summary Vulnerability Name: liangliangyy DjangoBlog up to 2.1.0.0 Setting django blog/settings.py SECRET_KEY hard-coded credentials CVE ID: CVE-2026-6578 CVSS Score: 5.1 Vulnerability Type: Hard-coded credentials Impact Scope: DjangoBlog 2.1.0.0 Remediation Plan: It is recommended to replace the affected object or use an alternative product

Goal Reached Thanks to every supporter — we hit 100%!

DjangoBlog up to 2.1.0.0 Hard-coded SECRET_KEY Credential Disclosure (CVE-2026-6578)