CRITICAL9.1Go
GHSA-f6qq-3m3h-4g42· CVE-2026-42560, GO-2026-5348auth: Patreon provider assigns the same local user ID to every authenticated Patreon account, enabling cross‑user impersonation
Modified: 6/25/2026
package
Go/github.com/go-pkgz/auth/v2
pkg:go/github.com/go-pkgz/auth/v2
—Go
GO-2026-5348· CVE-2026-42560, GHSA-f6qq-3m3h-4g42auth: Patreon provider assigns the same local user ID to every authenticated Patreon account, enabling cross‑user impersonation in github.com/go-pkgz/auth
Modified: 6/25/2026