Dromara MaxKey

• CVE-2026-69102 Critical 9.8 MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust 0.6%
• CVE-2026-67345 High 8.1 MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code Theft 0.6%
• CVE-2026-7699 Medium 6.3 Dromara MaxKey StrUtils.java StrUtils.checkSqlInjection sql injection 0.2%
• CVE-2025-6517 Medium 6.3 Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery 0.5%