Product
Kubero versions 3.0.0 through 3.1.1 contain an authentication bypass vulnerability that allows unauthenticated remote attackers to forge administrative JWTs by using a hardcoded fallback signing secret when JWT_SECRET is unset.