What is GHSA-hcqf-2mp3-h5vf?

GHSA-hcqf-2mp3-h5vf is a security advisory published by GitHub Security Advisories with Critical severity. My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication...

Which CVE IDs does GHSA-hcqf-2mp3-h5vf cover?

GHSA-hcqf-2mp3-h5vf covers the following CVE IDs: CVE-2025-63823. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hcqf-2mp3-h5vf?

GHSA-hcqf-2mp3-h5vf has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-hcqf-2mp3-h5vfCriticalCVSS 9.8

My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication...

Vendor

GitHub Security Advisories

Published

August 6, 2026

Last Modified

August 6, 2026

🔗 CVE IDs covered (1)

CVE-2025-63823 →

📋 Description

My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-63823
https://github.com/Leoccc98/cve-reports/blob/main/advisories/CVE-2025-63823/README.md
https://play.google.com/store/apps/details?id=com.safetipin.mysafetipin
https://github.com/advisories/GHSA-hcqf-2mp3-h5vf