Skip to content
OpenAdvisories

Package · Go

github.com/dexidp/dex

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2022-39222

    OAuth authorization code exposure in Dex

    Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex instances with public clients (and by extension, clients accepting tokens issued by those Dex instances) are affected by this vulnerability if they are running a v…

    dexidp dex github.com/dexidp/dex Go
  • Critical 9.3
    CVE-2020-26290

    Critical security issues in XML encoding in Dex

    Dex is a federated OpenID Connect provider written in Go. In Dex before version 2.27.0 there is a critical set of vulnerabilities which impacts users leveraging the SAML connector. The vulnerabilities enables potential signature bypass due to issues with XML …

    dexidp dex github.com/russellhaering/goxmldsig github.com/dexidp/dex Go