Go/github.com/pocket-id/pocket-id/backend CVE-2026-55834: unknown, EPSS 0.37%
Pocket-ID has an Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none in github.com/pocket-id/pocket-id/backend
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-6305
- https://github.com/pocket-id/pocket-id/security/advisories/GHSA-2wvm-8mvp-22qv
- https://github.com/pocket-id/pocket-id/commit/8a7577497131229badb35cb4b3a4227b1300afff
- https://github.com/pocket-id/pocket-id/releases/tag/v2.9.0
CVE-2026-55834 · published · modified · JSON