Skip to content
OpenAdvisories

Package · Go

github.com/ory/oathkeeper

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-33494

    Ory Oathkeeper has a path traversal authorization bypass

    ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. Versions prior to 26.2.0 are vulnerable to an authorization bypass via HTTP path traversal. An attacker can craft a…

    ory oathkeeper github.com/ory/oathkeeper Go