{"action":"Upgrade github.com/authorizerdev/authorizer to 0.0.0-20260807033110-66fe488fd2a4 or later.","affected":[{"introduced":"0"}],"component":"github.com/authorizerdev/authorizer","cve_ids":["CVE-2026-35511"],"ecosystem":"Go","exploited":false,"fixed_versions":["0.0.0-20260807033110-66fe488fd2a4"],"ghsa_id":"GHSA-29rf-f4vv-pvq6","id":"tcs_01M5KERWTZMSCQEVP4SSR6TTAN","modified_at":"2026-08-18T15:10:57.794629087Z","published_at":"2026-08-14T15:36:15Z","references":["https://osv.dev/vulnerability/GHSA-29rf-f4vv-pvq6","https://github.com/authorizerdev/authorizer/security/advisories/GHSA-29rf-f4vv-pvq6","https://github.com/authorizerdev/authorizer/commit/66fe488fd2a4e7acf1e517334344d5e8f3ddd296","https://github.com/authorizerdev/authorizer","https://github.com/authorizerdev/authorizer/releases/tag/2.4.0-rc.16"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-29rf-f4vv-pvq6","url":"https://osv.dev/vulnerability/GHSA-29rf-f4vv-pvq6"}],"summary":"Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts"}