WireGuard Portal v2 Vulnerable to OAuth Insecure Redirect URI / Account Takeover in github.com/h44z/wg-portal

GHSA-2r2v-9pf8-6342 · GO-2025-3371 · Published 08/01/2025 · updated 08/01/2025

In breve

GO-2025-3371 è una vulnerabilità non ancora valutata che riguarda github.com/h44z/wg-portal.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
github.com/h44z/wg-portal Go	`all versions`	No fix yet

WireGuard Portal v2 Vulnerable to OAuth Insecure Redirect URI / Account Takeover in github.com/h44z/wg-portal.

NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.

(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)

The additional affected modules and versions are: github.com/h44z/wg-portal from v2.0.0-alpha.1 before v2.0.0-alpha.3.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.