authorizerdev/authorizer Security Advisories | GitStock

high2026-08-14

Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts

GHSA-29rf-f4vv-pvq6 · CVE-2026-35511

critical2026-07-10

Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL

GHSA-h29v-hj44-q8cv · CVE-2026-54072

high2026-04-06

Authorizer: Password reset token theft and full auth token redirect via unvalidated redirect_uri

GHSA-x3f4-v83f-7wp2

high2026-04-06

Authorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation

GHSA-jfwg-rxf3-p7r9