authorizerdev authorizer

• CVE-2026-123196 High 8.1 Authorizer before 2.4.2 Password Reset Poisoning via x-authorizer-url gRPC metadata 0.4%
• CVE-2026-54072 Critical 9.3 Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL 0.5%