VDB
KO

GO-2026-5548

PocketBase: Account pre-hijacking via OAuth2 autolinking upgrade in github.com/pocketbase/pocketbase

Quick fix

GO-2026-5548 — github.com/pocketbase/pocketbase: upgrade to the fixed version with the command below.

go get github.com/pocketbase/pocketbase@v0.22.42

Details

PocketBase: Account pre-hijacking via OAuth2 autolinking upgrade in github.com/pocketbase/pocketbase

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/pocketbase/pocketbase
Introduced in: 0 Fixed in: 0.22.42
Fix go get github.com/pocketbase/pocketbase@v0.22.42

References