HIGH7.5Go
GHSA-4gfw-wf7c-w6g2· CVE-2024-9312, GO-2024-3188Authd allows attacker-controlled usernames to yield controllable UIDs
Modified: 10/11/2024
package
Go/github.com/ubuntu/authd
pkg:go/github.com/ubuntu/authd
MEDIUM6.4Go
GHSA-g8qw-mgjx-rwjr· CVE-2025-5689, GO-2025-3762New authd users logging in via SSH are members of the root group
Modified: 7/28/2025
HIGH8.8Go
GHSA-x5q3-c8rm-w787· CVE-2024-9313, GO-2024-3181PAM module may allow accessing with the credentials of another user
Modified: 1/21/2025
—Go
GO-2024-3181· CVE-2024-9313, GHSA-x5q3-c8rm-w787PAM module may allow accessing with the credentials of another user in github.com/ubuntu/authd
Modified: 3/3/2026
—Go
GO-2024-3188· CVE-2024-9312, GHSA-4gfw-wf7c-w6g2Authd allows attacker-controlled usernames to yield controllable UIDs in github.com/ubuntu/authd
Modified: 3/3/2026
—Go
GO-2025-3762· CVE-2025-5689, GHSA-g8qw-mgjx-rwjrNew authd users logging in via SSH are members of the root group in github.com/ubuntu/authd
Modified: 3/3/2026