SUSE CVE-2026-54072

Authorizer is an open-source, self-hostable authentication and authorization server. Prior to version 2.2.1, the /authorize endpoint accepts any redirecturi without validating it against AllowedOrigins. When responsetype=token or responsetype=idtoken, the server appends accesstoken, idtoken, and...

CVE-2026-54072

creationtimestamp| type| source ---|---|--- 2026-07-10 20:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcxkxuefn2w 2026-09-11 20:08:11+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvbemgc24w2t...