Ory / Oathkeeper

4 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-33496	Ory Oathkeeper has an authentication bypass by cache key confusion	HIGH	8.1	Mar 26, 2026
CVE-2026-33495	Ory Oathkeeper has an authentication bypass by usage of untrusted header	MEDIUM	6.5	Mar 26, 2026
CVE-2026-33494	Ory Oathkeeper has a path traversal authorization bypass	CRITICAL	10.0	Mar 26, 2026
CVE-2021-32701	Possible bypass of token claim validation when OAuth2 Introspection caching is enabled	HIGH	7.5	Jun 22, 2021

Rows per page

Showing 1 to 4 of 4 CVEs