Authorizerdev

2 CVEs in 1 Authorizerdev product, including Authorizer. Newest: CVE-2026-123196 (2026-11-05). Severity, EPSS and public exploits for each.

Authorizerdev products with known CVEs

ProductCVEs
Authorizer2
Authorizerdev CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-123196High8.12026-11-05Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unauthenticated attackers to control emailed link hosts by supplying x-au…
CVE-2026-54072Critical9.32026-09-11Authorizer is an open-source, self-hostable authentication and authorization server. Prior to version 2.2.1, the `/authorize` endpoint accepts any `redirect_ur…