CVE-2026-54693
2 advisories.
Go/github.com/zitadel/zitadel CVE-2026-54693: high
ZITADEL Users Can Self-Verify Email/Phone via API
Action: Upgrade github.com/zitadel/zitadel to 1.80.0-v2.20.0.20260608144108-ed09b3df7f43 or later.
go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20260608144108-ed09b3df7f43Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | - | - |
| 2.43.0 | - | - |
| 0 | 1.80.0-v2.20.0.20260608144108-ed09b3df7f43 | - |
Fixed versions
| 1.80.0-v2.20.0.20260608144108-ed09b3df7f43 |
Sources
- osv: GHSA-jq8w-8q2f-ffm9
- https://github.com/zitadel/zitadel/security/advisories/GHSA-jq8w-8q2f-ffm9
- https://github.com/zitadel/zitadel/commit/90f310212d3a5075084a603bf61fed549c92956d
- https://github.com/zitadel/zitadel/commit/a1748b2f0326ddf7be0de44b4f980ae2c07c0151
- https://github.com/zitadel/zitadel/commit/ed09b3df7f43e870423e4d8f2757e6894481604f
- https://github.com/zitadel/zitadel
- https://github.com/zitadel/zitadel/releases/tag/v3.4.11
- https://github.com/zitadel/zitadel/releases/tag/v4.15.1
CVE-2026-54693 · published · modified · JSON
Go/github.com/zitadel/zitadel CVE-2026-54693: unknown
ZITADEL Users Can Self-Verify Email/Phone via API in github.com/zitadel/zitadel
Action: Upgrade github.com/zitadel/zitadel to 1.80.0-v2.20.0.20260608144108-ed09b3df7f43 or later.
go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20260608144108-ed09b3df7f43Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
| 0 | - | - |
| 0 | 1.80.0-v2.20.0.20260608144108-ed09b3df7f43 | - |
Fixed versions
| 1.80.0-v2.20.0.20260608144108-ed09b3df7f43 |
Sources
- osv: GO-2026-6141
- https://github.com/zitadel/zitadel/security/advisories/GHSA-jq8w-8q2f-ffm9
- https://github.com/zitadel/zitadel/commit/90f310212d3a5075084a603bf61fed549c92956d
- https://github.com/zitadel/zitadel/commit/a1748b2f0326ddf7be0de44b4f980ae2c07c0151
- https://github.com/zitadel/zitadel/commit/ed09b3df7f43e870423e4d8f2757e6894481604f
- https://github.com/zitadel/zitadel/releases/tag/v3.4.11
- https://github.com/zitadel/zitadel/releases/tag/v4.15.1
CVE-2026-54693 · published · modified · JSON