Weak JSON Web Token (JWT) signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users' JWT tokens. This occurs because Math.random in Node.js is used.Referenceshttps://securitylab.github.com/advisories/GHSL-2020-228-YMFE-yapihttps://github.com/YMFE/yapi/issues/2117