CVE-2026-78062

Name of the Vulnerable Software and Affected Versions vas3k TaxHacker versions prior to 0.8.3

Description An issue exists in the JWT Secret Handler component within the envSchema.parse() function located in the lib/config.ts file. Remote manipulation of the BETTER AUTH SECRET argument can lead to the use of hard-coded credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict the use of the BETTER AUTH SECRET argument in the envSchema.parse() function.