Go-pkgz vulnerabilities
We track 1 vulnerability in Go-pkgz products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 9, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Go-pkgz vulnerabilities
- 9.1 Critical severity
auth: Improper Authentication
auth provides authentication via oauth2, direct and email. From versions 1.18.0 to before 1.25.2 and 2.0.0 to before 2.1.2, the Patreon OAuth provider maps every authenticated Patreon account to the same local user.ID, instead of deriving a unique ID from the