{"action":"Upgrade github.com/zitadel/zitadel to 1.80.0-v2.20.0.20260608144108-ed09b3df7f43 or later.","affected":[{"introduced":"4.0.0"},{"introduced":"2.43.0"},{"fixed":"1.80.0-v2.20.0.20260608144108-ed09b3df7f43","introduced":"0"}],"component":"github.com/zitadel/zitadel","cve_ids":["CVE-2026-54693"],"ecosystem":"Go","epss":0.00578,"exploited":false,"fixed_versions":["1.80.0-v2.20.0.20260608144108-ed09b3df7f43"],"ghsa_id":"GHSA-jq8w-8q2f-ffm9","id":"tcs_01M5KFEMPHWH2QSY51WNADGSX1","modified_at":"2026-08-18T15:10:32.100282032Z","published_at":"2026-07-29T16:54:49Z","references":["https://osv.dev/vulnerability/GHSA-jq8w-8q2f-ffm9","https://github.com/zitadel/zitadel/security/advisories/GHSA-jq8w-8q2f-ffm9","https://github.com/zitadel/zitadel/commit/90f310212d3a5075084a603bf61fed549c92956d","https://github.com/zitadel/zitadel/commit/a1748b2f0326ddf7be0de44b4f980ae2c07c0151","https://github.com/zitadel/zitadel/commit/ed09b3df7f43e870423e4d8f2757e6894481604f","https://github.com/zitadel/zitadel","https://github.com/zitadel/zitadel/releases/tag/v3.4.11","https://github.com/zitadel/zitadel/releases/tag/v4.15.1"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-jq8w-8q2f-ffm9","url":"https://osv.dev/vulnerability/GHSA-jq8w-8q2f-ffm9"}],"summary":"ZITADEL Users Can Self-Verify Email/Phone via API"}