authorizerdev

Products

ProductCVEsExploitedLatest
authorizer2–Nov 5, 2026

Exploited and recent CVEs

  • CVE-2026-123196 High 8.1 Authorizer before 2.4.2 Password Reset Poisoning via x-authorizer-url gRPC metadata 0.4%
  • CVE-2026-54072 Critical 9.3 Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL 0.5%