{"id":"GO-2026-5361","revision":"497f2ca20bf94a60958648bf097dd050","records":[{"revision":"497f2ca20bf94a60958648bf097dd050","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5361","aliases":["CVE-2026-6970","GHSA-fg3j-5w9g-hmg7"],"title":"authd: Primary group ID is incorrectly set to value of UID in github.com/canonical/authd","description":"authd: Primary group ID is incorrectly set to value of UID in github.com/canonical/authd","state":0,"publishedAt":"2026-06-25T18:43:19+00:00","modifiedAt":"2026-06-25T19:45:34.2515707+00:00","affected":[{"ecosystem":"Go","name":"github.com/canonical/authd","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.6.0"},{"kind":"fixed","version":"0.6.4"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/canonical/authd/security/advisories/GHSA-fg3j-5w9g-hmg7","https://nvd.nist.gov/vuln/detail/CVE-2026-6970","https://github.com/canonical/authd/commit/154b428305cb1a7a19c897626fefd09d6dde8b9f"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5361","license":"OSV · upstream source license applies","key":"osv:GO-2026-5361","identifiers":["GO-2026-5361","CVE-2026-6970","GHSA-fg3j-5w9g-hmg7"]},"retained":false,"historicalAffected":[]}],"coverage":[]}