GHSA-7543-mr7h-6v86
Improper Authorization in googleapis
Versions of googleapis prior to 39.1.0 are vulnerable to Improper Authorization. Setting credentials to one client may apply to all clients which may cause requests to be sent with the incorrect credentials.
Recommendation
Upgrade to version 39.1.0.
What each source reports
GitHub AdvisoriesNo score
Improper Authorization in googleapis
Versions of googleapis prior to 39.1.0 are vulnerable to Improper Authorization. Setting credentials to one client may apply to all clients which may cause requests to be sent with the incorrect credentials.
Recommendation
Upgrade to version 39.1.0.
- Record
GHSA-7543-mr7h-6v86- Weakness
- CWE-285
- Updated
- 2026-11-02
OSVNo score
Improper Authorization in googleapis
Versions of googleapis prior to 39.1.0 are vulnerable to Improper Authorization. Setting credentials to one client may apply to all clients which may cause requests to be sent with the incorrect credentials.
Recommendation
Upgrade to version 39.1.0.
- Record
GHSA-7543-mr7h-6v86- Weakness
- CWE-285
- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
googleapisnpm | before 39.1.0 | 39.1.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-7543-mr7h-6v86 is a vulnerability with no CVSS score yet in googleapis, published September 2, 2020. No source lists public exploit code. Fixed in googleapis 39.1.0.