Skip to content
OpenAdvisories

Package · Go

github.com/identrail/identrail

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.5
    CVE-2026-59185

    identrail: Cross-tenant GitHub installation binding without ownership verification

    identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on `POST /v1/workspaces/:workspace_id/projects/:project_id/github/connect/complete` endpoint in `internal/api/router.go` accepts `installation_…

    identrail identrail github.com/identrail/identrail Go