github.com/go-pkgz/auth vulnerabilities (Go)

1 vulnerability.

• github.com/go-pkgz/auth Go auth: Patreon provider assigns the same local user ID to every authenticated Patreon account, enabling cross‑user impersonation CVE-2026-42560 Fix available 9.1 CriticalApril 30, 2026