CVE-2026-32138

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-32138

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-32138.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-32138

Aliases

GHSA-r7cr-5wcx-x9wm

Published

2026-03-12T18:32:15.489Z

Modified

2026-04-02T13:25:13.458075Z

Severity

8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N CVSS Calculator

Summary

NEXULEAN API Key Leak

Details

NEXULEAN is a cybersecurity portfolio & service platform for an Ethical Hacker, AI Enthusiast, and Penetration Tester. Prior to 2.0.0, a security vulnerability was identified where Firebase and Web3Forms API keys were exposed. An attacker could use these keys to interact with backend services without authentication, potentially leading to unauthorized access to application resources and user data. This vulnerability is fixed in 2.0.0.

Database specific

{
    "cwe_ids": [
        "CWE-284",
        "CWE-798"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32138.json"
}

References

Affected packages

Git / github.com/nexulean/website

Affected ranges

Type: GIT
Repo: https://github.com/nexulean/website
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

84f380e9247e5fe42502ac3427ada65222507015

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-32138.json"

Git / github.com/stalin-143/website

Affected ranges

Type

GIT

Repo

https://github.com/stalin-143/website

Events

Introduced

Fixed

84f380e9247e5fe42502ac3427ada65222507015

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.0.0"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-32138.json"