[LOW] Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync

PKSA-4qd5-bb9g-9x8d CVE-2026-52841 GHSA-8hm4-r66f-29wr

Affected package: alextselegidis/easyappointments

Affected version: <=1.5.2

Reported by:
GitHub