github.com/dexidp/dex
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers | github.com/dexidp/dex | Go | High | Fix reported | |
| Dex vulnerable to Man-in-the-Middle allowing ID token capture via intercepted authorization code | github.com/dexidp/dex | Go | Critical | Fix reported | |
| Dex: Token-exchange endpoint is missing AllowedConnectors enforcement | github.com/dexidp/dex | Go | High | Fix reported | |
| Critical security issues in XML encoding in github.com/dexidp/dex | github.com/dexidp/dexgithub.com/russellhaering/goxmldsig | Go | Critical | Fix reported | |
| Authentication Bypass in dex | github.com/dexidp/dexRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/observatorium-rhel8 | GoRed Hat | Critical | Fix reported |