[Security] Fix 6 vulnerabilities: Plaintext Passwords, Hardcoded JWT, Default Accounts, Missing SECRET_KEY (CWE-256, CWE-798, CWE-1392, CWE-532)#350

Open

saaa99999999 wants to merge 2 commits into

melihcolpan:masterfrom

saaa99999999:security-fixes

Commits on May 16, 2026

fix: critical security vulnerabilities

Security Researcher
and
claude
committed

Commits on May 17, 2026

fix: add bcrypt password hashing to replace plaintext storage
saaa99999999
committed