CVE-2026-55669
2 advisories.
Go/github.com/zitadel/zitadel CVE-2026-55669: medium 4.2, EPSS 0.15%
ZITADEL: Missing Token Audience Validation (`aud`) in JWT IdP Provider
Action: Upgrade github.com/zitadel/zitadel to 1.80.0-v2.20.0.20260615132747-d184e976fc79 or later.
go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20260615132747-d184e976fc79Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.80.0-v2.20.0.20260615132747-d184e976fc79 | - |
Fixed versions
| 1.80.0-v2.20.0.20260615132747-d184e976fc79 |
Sources
- osv: GHSA-g5h5-m4hm-xjrr
- https://github.com/zitadel/zitadel/security/advisories/GHSA-g5h5-m4hm-xjrr
- https://github.com/zitadel/zitadel/commit/d184e976fc799a383bb6ef9f32c3bae11a3ef85f
- https://github.com/zitadel/zitadel
- https://github.com/zitadel/zitadel/releases/tag/v3.4.12
- https://github.com/zitadel/zitadel/releases/tag/v4.15.2
CVE-2026-55669 · published · modified · JSON
Go/github.com/zitadel/zitadel CVE-2026-55669: unknown, EPSS 0.15%
ZITADEL: Missing Token Audience Validation (`aud`) in JWT IdP Provider in github.com/zitadel/zitadel
Action: Upgrade github.com/zitadel/zitadel to 1.80.0-v2.20.0.20260615132747-d184e976fc79 or later.
go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20260615132747-d184e976fc79Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.80.0-v2.20.0.20260615132747-d184e976fc79 | - |
Fixed versions
| 1.80.0-v2.20.0.20260615132747-d184e976fc79 |
Sources
- osv: GO-2026-5391
- https://github.com/zitadel/zitadel/security/advisories/GHSA-g5h5-m4hm-xjrr
- https://github.com/zitadel/zitadel/commit/d184e976fc799a383bb6ef9f32c3bae11a3ef85f
- https://github.com/zitadel/zitadel/releases/tag/v3.4.12
- https://github.com/zitadel/zitadel/releases/tag/v4.15.2
CVE-2026-55669 · published · modified · JSON