Authorizerdev Authorizer vulnerabilities

• authorizerdev authorizer Authorizer before 2.4.2 Password Reset Poisoning via x-authorizer-url gRPC metadata CVE-2026-123196 8.6 HighNovember 5, 2026
• authorizerdev authorizer Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL CVE-2026-54072 Fix available 9.3 CriticalJuly 10, 2026