—
GO-2026-6227
Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts in github.com/authorizerdev/authorizer
Quick fix
GO-2026-6227 — github.com/authorizerdev/authorizer: upgrade to the fixed version with the command below.
go get github.com/authorizerdev/authorizer@v0.0.0-20260807033110-66fe488fd2a4Details
Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts in github.com/authorizerdev/authorizer
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/authorizerdev/authorizer
Introduced in:
0Fixed in: 0.0.0-20260807033110-66fe488fd2a4Fix
go get github.com/authorizerdev/authorizer@v0.0.0-20260807033110-66fe488fd2a4