CVE-2026-54072
2 advisories.
Go/github.com/authorizerdev/authorizer CVE-2026-54072: critical 9.3, EPSS 0.46%
Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL
Action: Upgrade github.com/authorizerdev/authorizer to 0.0.0-20260409051328-bd3f5baf6d3d or later.
go get github.com/authorizerdev/authorizer@v0.0.0-20260409051328-bd3f5baf6d3dAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260409051328-bd3f5baf6d3d |
Sources
- osv: GHSA-h29v-hj44-q8cv
- https://github.com/authorizerdev/authorizer/security/advisories/GHSA-h29v-hj44-q8cv
- https://github.com/authorizerdev/authorizer
CVE-2026-54072 · published · modified · JSON
Go/github.com/authorizerdev/authorizer CVE-2026-54072: unknown, EPSS 0.46%
Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL in github.com/authorizerdev/authorizer
Action: Upgrade github.com/authorizerdev/authorizer to 0.0.0-20260409051328-bd3f5baf6d3d or later.
go get github.com/authorizerdev/authorizer@v0.0.0-20260409051328-bd3f5baf6d3dAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260409051328-bd3f5baf6d3d |
Sources
- osv: GO-2026-5959
- https://github.com/authorizerdev/authorizer/security/advisories/GHSA-h29v-hj44-q8cv
CVE-2026-54072 · published · modified · JSON