—
GO-2026-5959
Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL in github.com/authorizerdev/authorizer
Quick fix
GO-2026-5959 — github.com/authorizerdev/authorizer: upgrade to the fixed version with the command below.
go get github.com/authorizerdev/authorizer@v0.0.0-20260409051328-bd3f5baf6d3dDetails
Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL in github.com/authorizerdev/authorizer
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/authorizerdev/authorizer
Introduced in:
0Fixed in: 0.0.0-20260409051328-bd3f5baf6d3dFix
go get github.com/authorizerdev/authorizer@v0.0.0-20260409051328-bd3f5baf6d3d