Skip to content
OpenAdvisories

Package · Go

github.com/ory/oathkeeper

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-w9mr-28mw-j8hg

    Hop-by-hop abuse to malform header mutator

    ### Impact Downstream services relying on the presence of headers set by the `header` mutator could be exploited. A client can drop the header set by the `header` mutator by including that header's name in the `Connection` header. Example minimal config: ```y…

    github.com/ory/oathkeeper Go