Ory / Kratos

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-33503	Ory Kratos has a SQL injection via forged pagination tokens	HIGH	7.2	Mar 26, 2026
CVE-2024-45042	Ory Kratos's `highest_available` setting does not properly respect code + mfa credentials	MEDIUM	5.9	Sep 26, 2024

Rows per page

Showing 1 to 2 of 2 CVEs