Skip to content
OpenAdvisories

Package · Go

github.com/ory/oathkeeper

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-33496

    Ory Oathkeeper has an authentication bypass by cache key confusion

    ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. Versions prior to 26.2.0 are vulnerable to authentication bypass due to cache key confusion. The `oauth2_introspect…

    ory oathkeeper github.com/ory/oathkeeper Go
  • High 7.5
    CVE-2021-32701

    Possible bypass of token claim validation when OAuth2 Introspection caching is enabled

    ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. When you make a request to an endpoint that requires the scope `foo` using an access token granted with that `foo` …

    ory oathkeeper github.com/ory/oathkeeper Go