Security
فارسی
All products

github.com/pomerium/pomerium

Go · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Pomerium exposed OAuth2 access and ID tokens in user info endpoint responseCVE-2024-39315 · GHSA-RRQR-7W59-637VVersion ranges need review. github.com/pomerium/pomerium Go Medium Fix reported
Pomerium vulnerable to Incorrect Authorization with specially crafted requestsCVE-2023-33189 · GHSA-PVRC-WVJ2-F59PVersion ranges need review. github.com/pomerium/pomerium Go Critical Fix reported
Pomerium Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE CallbackCVE-2026-50285 · GHSA-GGW3-5987-RX77 github.com/pomerium/pomerium Go High Fix reported
pomerium_signature is not verified in middleware in github.com/pomerium/pomeriumCVE-2021-29652 · GHSA-FV82-R8QV-CH4VVersion ranges need review. github.com/pomerium/pomerium Go Medium Fix reported
OIDC claims not updated from Identity Provider in PomeriumCVE-2021-41230 · GHSA-J6WP-3859-VXFGVersion ranges need review. github.com/pomerium/pomerium Go Medium Fix reported
JWT leak via Open Redirect in Programmatic accessCVE-2021-29651 · GHSA-35VC-W93W-75C2Version ranges need review. github.com/pomerium/pomerium Go Medium Fix reported
Pomerium service account access token may grant unintended access to databroker APICVE-2024-47616 · GHSA-R7RH-JWW5-5FJRVersion ranges need review. github.com/pomerium/pomerium Go High Fix reported
Incorrect handling of H2 GOAWAY + SETTINGS framesCVE-2021-39162 · GHSA-GJCG-VRXG-XMGVVersion ranges need review. github.com/pomerium/pomerium Go High Fix reported
Exposure of debug and metrics endpoints in PomeriumCVE-2022-24797 · GHSA-Q98F-2X4P-PRJRVersion ranges need review. github.com/pomerium/pomerium Go Medium Fix reported
Excessive CPU usageCVE-2021-39204 · GHSA-5WJF-62HW-Q78R github.com/pomerium/pomerium Go High Fix reported
Incorrect Authorization with specially crafted requestsCVE-2021-39206 · GHSA-CFC2-WJCM-C8FM github.com/pomerium/pomerium Go High Fix reported
Multiple security issues in Pomerium's embedded envoyGHSA-J34V-3552-5R7J github.com/pomerium/pomerium Go Medium Fix reported