CVE-2026-33496: Go Auth Cache Key Confusioncve-2026-33496-go-auth-cache-key-confusion
Using an authorization token directly as the sole cache key without scoping it (e.g., to an introspection endpoint, audience, or tenant API URL) can lead to cache key confusion. An attacker could use a token validated for one endpoint to access a different endpoint if they share the cache. Scoping the cache key by incorporating the endpoint or configuration
