Skip to content
OpenAdvisories

Package · Go

github.com/zitadel/zitadel

52 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-55671

    ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components

    ZITADEL is an open source identity management platform. From 4.0.0-rc.1 through 4.15.1, ZITADEL's HTTP notification channels, OIDC BackChannel Logout, and SAML metadata URL fetches do not consistently validate user-defined URLs against protected denylist hand…

    zitadel zitadel github.com/zitadel/zitadel Go
  • Low 2.3
    CVE-2026-55670

    ZITADEL: Cross-Tenant User Leakage via Recycled Identifiers

    ZITADEL is an open source identity management platform. Prior to 4.15.1, ZITADEL's event store validation can retain the original resource owner for a deleted user identifier, causing a later user recreated with the same identifier in another organization to …

    zitadel zitadel github.com/zitadel/zitadel Go
  • Low 2.1
    CVE-2026-27945

    ZITADEL has potential SSRF via Actions

    ZITADEL is an open source identity management platform. Zitadel Action V2 (introduced as early preview in 2.59.0, beta in 3.0.0 and GA in 4.0.0) is a webhook based approach to allow developers act on API request to Zitadel and customize flows such the issue o…

    zitadel zitadel github.com/zitadel/zitadel github.com/zitadel/zitadel/v2 Go