Security
فارسی
All products

github.com/oauth2-proxy/oauth2-proxy/v7

Go · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header SpoofingCVE-2026-40575 · GHSA-7X63-XV5R-3P2X github.com/oauth2-proxy/oauth2-proxy/v7Red Hat Ceph Storage 9/rhceph/oauth2-proxy-rhel9 GoRed Hat Critical Fix reported
OAuth2 Proxy has an Authentication Bypass via Fragment Confusion in skip_auth_routes and skip_auth_regexCVE-2026-41059 · GHSA-PXQ7-H93F-9JRGVersion ranges need review. github.com/oauth2-proxy/oauth2-proxy/v7github.com/oauth2-proxy/oauth2-proxy GoRed Hat High Fix reported
OAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email ClaimsCVE-2026-40574 · GHSA-C5C4-8R6X-56W3Version ranges need review. github.com/oauth2-proxy/oauth2-proxy/v7github.com/oauth2-proxy/oauth2-proxy GoRed Hat Medium Fix reported
OAuth2 Proxy's session cookies are not cleared when rendering sign-in pageCVE-2026-34454 · GHSA-F24X-5G9Q-753FVersion ranges need review. github.com/oauth2-proxy/oauth2-proxy/v7github.com/oauth2-proxy/oauth2-proxy Go Low Fix reported
OAuth2 Proxy's Health Check User-Agent Matching Bypasses Authentication in auth_request ModeCVE-2026-34457 · GHSA-5HVV-M4W4-GF6VVersion ranges need review. github.com/oauth2-proxy/oauth2-proxy/v7github.com/oauth2-proxy/oauth2-proxy Go Critical Fix reported
OAuth2-Proxy is vulnerable to header smuggling via underscore leading to potential privilege escalationCVE-2025-64484 · GHSA-VJRC-MH2V-45X6Version ranges need review. github.com/oauth2-proxy/oauth2-proxy/v7github.com/oauth2-proxy/oauth2-proxy GoRed Hat High Fix reported
OAuth2-Proxy's `--gitlab-group` GitLab Group Authorization config flag stopped working in v7.0.0CVE-2021-21411 · GHSA-652X-M2GR-HPPMVersion ranges need review. github.com/oauth2-proxy/oauth2-proxy/v7github.com/oauth2-proxy/oauth2-proxy Go Medium Fix reported
Subdomain checking of whitelisted domains could allow unintended redirects in oauth2-proxyCVE-2021-21291 · GHSA-4MF2-F3WH-GVF2Version ranges need review. github.com/oauth2-proxy/oauth2-proxy/v7github.com/oauth2-proxy/oauth2-proxy Go Low Fix reported
OAuth2-Proxy has authentication bypass in oauth2-proxy skip_auth_routes due to Query Parameter inclusionCVE-2025-54576 · GHSA-7RH7-C77V-6434Version ranges need review. github.com/oauth2-proxy/oauth2-proxy/v7github.com/oauth2-proxy/oauth2-proxy GoRed Hat Critical Fix reported