—Go
GO-2026-5737· GHSA-x3f4-v83f-7wp2Authorizer: Password reset token theft and full auth token redirect via unvalidated redirect_uri in github.com/authorizerdev/authorizer
Modified: 6/25/2026
package
Go/github.com/authorizerdev/authorizer
pkg:go/github.com/authorizerdev/authorizer
HIGHGo
GHSA-29rf-f4vv-pvq6· CVE-2026-35511, GO-2026-6227Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts
Modified: 8/18/2026
CRITICAL9.3Go
GHSA-h29v-hj44-q8cv· CVE-2026-54072, GO-2026-5959Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL
Modified: 7/21/2026
HIGH7.3Go
GHSA-jfwg-rxf3-p7r9· GO-2026-5467Authorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation
Modified: 6/25/2026
HIGHGo
GHSA-x3f4-v83f-7wp2· GO-2026-5737Authorizer: Password reset token theft and full auth token redirect via unvalidated redirect_uri
Modified: 6/25/2026
—Go
GO-2026-5467· GHSA-jfwg-rxf3-p7r9Authorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation in github.com/authorizerdev/authorizer
Modified: 6/25/2026
—Go
GO-2026-5959· CVE-2026-54072, GHSA-h29v-hj44-q8cvAuthorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL in github.com/authorizerdev/authorizer
Modified: 7/21/2026
—Go
GO-2026-6227· CVE-2026-35511, GHSA-29rf-f4vv-pvq6Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts in github.com/authorizerdev/authorizer
Modified: 8/18/2026