Skip to content
OpenAdvisories

Package · Go

github.com/ory/keto

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.2
    CVE-2026-33505

    Ory Keto has a SQL injection via forged pagination tokens

    Ory Keto is am open source authorization server for managing permissions at scale. Prior to version 26.2.0, the GetRelationships API in Ory Keto is vulnerable to SQL injection due to flaws in its pagination implementation. Pagination tokens are encrypted usin…

    ory keto github.com/ory/keto Go