GO-2026-4963
- Source
- https://pkg.go.dev/vuln/GO-2026-4963
- Import Source
- https://vuln.go.dev/ID/GO-2026-4963.json
- JSON Data
- https://api.osv.dev/v1/vulns/GO-2026-4963
- Aliases
-
- CVE-2026-41070
- GHSA-246w-jgmq-88fg
- Published
- 2026-05-20T19:07:16Z
- Modified
- 2026-05-20T19:30:11.543633656Z
- Summary
- openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, allowing unauthenticated VPN access in github.com/jkroepke/openvpn-auth-oauth2
- Details
-
openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, allowing unauthenticated VPN access in github.com/jkroepke/openvpn-auth-oauth2
- Database specific
{ "url": "https://pkg.go.dev/vuln/GO-2026-4963", "review_status": "UNREVIEWED" }- References
-
- https://github.com/jkroepke/openvpn-auth-oauth2/security/advisories/GHSA-246w-jgmq-88fg
- https://nvd.nist.gov/vuln/detail/CVE-2026-41070
- https://github.com/jkroepke/openvpn-auth-oauth2/commit/36f69a6c67c1054da7cbfa04ced3f0555127c8f2
- https://github.com/jkroepke/openvpn-auth-oauth2/pull/829
- https://github.com/OpenVPN/openvpn/blob/master/include/openvpn-plugin.h.in
- https://github.com/OpenVPN/openvpn3/blob/master/doc/webauth.md
- https://github.com/jkroepke/openvpn-auth-oauth2/releases/tag/v1.27.3
Affected packages
Go / github.com/jkroepke/openvpn-auth-oauth2
Package
- Name
- github.com/jkroepke/openvpn-auth-oauth2
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/jkroepke/openvpn-auth-oauth2