Vulnerability Database - OSV

GO-2026-5953

Go/github.com/casdoor/casdoor

Casdoor: GetTokenExchangeToken bypass through lack of cross-organization JWT signature check in github.com/casdoor/casdoor 17 Jul

No fix available

GHSA-c9w5-qp6m-m395

Go/github.com/casdoor/casdoor

Casdoor: GetTokenExchangeToken bypass through lack of cross-organization JWT signature check 28 May

Fix available
Severity - 9.8 (Critical)