CVE-2026-59185

2 advisories.

Go/github.com/identrail/identrail CVE-2026-59185: high 8.5

Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification

Action: Upgrade github.com/identrail/identrail to 1.0.2 or later.

go get github.com/identrail/identrail@v1.0.2

Affected

introduced	fixed	last affected
0	1.0.2	-

Fixed versions

1.0.2

Sources

CVE-2026-59185 · published 2026-09-09T23:52:14Z · modified 2026-09-17T17:40:57.250745573Z · JSON

Go/github.com/identrail/identrail CVE-2026-59185: unknown

Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification in github.com/identrail/identrail

Action: Upgrade github.com/identrail/identrail to 1.0.2 or later.

go get github.com/identrail/identrail@v1.0.2

Affected

introduced	fixed	last affected
0	1.0.2	-

Fixed versions

1.0.2

Sources

CVE-2026-59185 · published 2026-09-16T16:56:22Z · modified 2026-09-17T17:30:11.251459067Z · JSON