- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 1 · 1 critical
- Registry
- pkg.go.dev
Advisories 1
- CVE-2026-54072Critical 9.3
Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL
Affected: fixed in 0.0.0-20260409051328-bd3f5baf6d3d.