auth v2.197.0

Auth - Authentication and User Management by Supabase Auth is a user management and authentication server written in Go that powers Supabase's features such as: Issuing JWTs Row Level Security with PostgREST User management Sign in with email, password, magic link, phone number Sign in with...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: neuvector-fips, teleport-operator-fips, gotrue, rancher, mattermost-fips, gotrue-fips, omni, commercial-grafana, omni-fips, mattermost, dex-fips, zitadel, dex, teleport, neuvector, rancher-agent...

GHSA-479M-364C-43VC vulnerabilities

Vulnerabilities for packages: neuvector-fips, teleport-operator-fips, gotrue, rancher, mattermost-fips, gotrue-fips, omni, commercial-grafana, omni-fips, mattermost, dex-fips, zitadel, dex, teleport, neuvector, rancher-agent...

WS-2022-0078

Under certain circumstances a valid user object would have been created with invalid provider metadata. This vulnerability affects everyone running an instance of GoTrue as a service. We advise you to update especially if you are using the provider metadata from the user object to secure other...

GO-2022-0365 User object created with invalid provider data in GoTrue in github.com/netlify/gotrue

User object created with invalid provider data in GoTrue in github.com/netlify/gotrue...

User object created with invalid provider data in GoTrue

Impact What kind of vulnerability is it? Who is impacted? Under certain circumstances a valid user object would have been created with invalid provider metadata. This vulnerability affects everyone running an instance of GoTrue as a service. We advise you to update especially if you are using the...

GHSA-WPFR-6297-9V57 User object created with invalid provider data in GoTrue

Impact What kind of vulnerability is it? Who is impacted? Under certain circumstances a valid user object would have been created with invalid provider metadata. This vulnerability affects everyone running an instance of GoTrue as a service. We advise you to update especially if you are using the...

PT-2021-24376

Name of the Vulnerable Software and Affected Versions: gotrue versions prior to 1.0.0 Description: The issue affects users leveraging the SAML auth provider due to vulnerabilities in goxmldsig and gosaml2, which allow signature validation bypass and authentication bypass, respectively...