CVE-2026-46405: Go Auth Response With Error

Returning a non-nil Auth object alongside a non-nil error in a response handler can cause caller handlers to create orphaned tokens or process invalid authentication state.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Go
greprules fetch cve-2026-46405-go-auth-response-with-error --engine opengrep

Description

Returning a non-nil Auth object alongside a non-nil error in a response handler can cause caller handlers to create orphaned tokens or process invalid authentication state.