Ory / Hydra

3 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-33504	Ory Hydra has a SQL injection via forged pagination tokens	HIGH	7.2	Mar 26, 2026
CVE-2020-5300	Disallow replay of `private_key_jwt` by blacklisting JTIs in Hydra	MEDIUM	5.8	Apr 6, 2020
CVE-2019-8400	ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.	MEDIUM	6.1	Feb 17, 2019

Rows per page

Showing 1 to 3 of 3 CVEs