CVE-2026-62253: Go Auth Middleware Fail Open On Empty Credentialcve-2026-62253-go-auth-middleware-fail-open-on-empty-credential
Authentication middleware fails open: when the signing credential ($SECRET) is empty the request is passed straight to next($CTX) without any authentication, so a deployment that leaves the credential unconfigured (a common default) exposes every protected endpoint. Fail closed instead (return an HTTP error when the credential is missing), provision the cred
