Skip to content
OpenAdvisories

Package · Go

github.com/ory/oathkeeper

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-33495

    Ory Oathkeeper has an authentication bypass by usage of untrusted header

    ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. Ory Oathkeeper is often deployed behind other components like CDNs, WAFs, or reverse proxies. Depending on the setu…

    ory oathkeeper github.com/ory/oathkeeper Go