CVE-2026-53528: Go Auth Concurrent Store Access

Multiple user store operations in an authentication workflow directly access a mutable struct field without capturing a consistent instance reference, which can cause state inconsistencies during store swaps.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Go
greprules fetch cve-2026-53528-go-auth-concurrent-store-access --engine opengrep

Description

Multiple user store operations in an authentication workflow directly access a mutable struct field without capturing a consistent instance reference, which can cause state inconsistencies during store swaps.