Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification
Go github.com/identrail/identrail · Upgrade to 1.0.2 or later · < 1.0.2 · CVE-2026-59185 · GHSA-cp3j-m783-3ph5 · amended