CRITICAL10.0Go
GHSA-246w-jgmq-88fg· CVE-2026-41070, GO-2026-4963openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, allowing unauthenticated VPN access
Modified: 5/20/2026
package
Go/github.com/jkroepke/openvpn-auth-oauth2
pkg:go/github.com/jkroepke/openvpn-auth-oauth2
—Go
GO-2026-4963· CVE-2026-41070, GHSA-246w-jgmq-88fgopenvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, allowing unauthenticated VPN access in github.com/jkroepke/openvpn-auth-oauth2
Modified: 5/20/2026