PT-2025-45827 · Go · Github.Com/Casdoor/Casdoor

Published 2025-10-30 · Updated 2025-10-30

OSV

Casdoor is vulnerable to Improper Authorization in github.com/casdoor/casdoor.

NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.

(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)

The additional affected modules and versions are: github.com/casdoor/casdoor before v2.63.0.

Related Identifiers

GO-2025-4026

Affected Products

Github.Com/Casdoor/Casdoor

References · 7

• https://osv.dev/vulnerability/GO-2025-4026 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61524 · Security Note
• https://github.com/casdoor/casdoor/commit/d883db907bb6e0b95737ef8e8b57b7da9078cbdd · Note
• https://github.com/casdoor/casdoor/releases/tag/v2.63.0 · Note
• https://github.com/advisories/GHSA-5m9m-j5p7-m7f9 · Note
• https://gist.github.com/DevHjz/e75cea851d48e5f5478ac2a90757851a · Note
• http://casdoor.com · Note