CVE-2026-42238: Gin Conditional Auth Required Bypasscve-2026-42238-gin-conditional-auth-required-bypass
Gin middleware function conditionally invokes middleware.AuthRequired() only on one branch and calls ctx.Next() on the other branch, allowing requests to proceed unauthenticated when the condition is false. This is a state- or time-window-dependent authentication bypass (e.g. "auth only after install" or "auth only after a timeout"); attackers can hit the ro
