Go/github.com/authorizerdev/authorizer: high
Authorizer: Password reset token theft and full auth token redirect via unvalidated redirect_uri
Action: Upgrade github.com/authorizerdev/authorizer to 0.0.0-20260329085140-6d9bef1aaba3 or later.
go get github.com/authorizerdev/authorizer@v0.0.0-20260329085140-6d9bef1aaba3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260329085140-6d9bef1aaba3 |
Sources
- osv: GHSA-x3f4-v83f-7wp2
- https://github.com/authorizerdev/authorizer/security/advisories/GHSA-x3f4-v83f-7wp2
- https://github.com/authorizerdev/authorizer/pull/502
- https://github.com/authorizerdev/authorizer/commit/6d9bef1aaba3f867f8c769b93eb7fc80e4e7b0a2
- https://github.com/authorizerdev/authorizer
- https://github.com/authorizerdev/authorizer/releases/tag/2.0.1
published · modified · JSON