OA
Product
oauth2-proxy
7
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 1Low 1
Watch
Add oauth2-proxy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-64484 | 8.5 | Nov 10 | OAuth2-Proxy vulnerable to header smuggling via underscore, leading to potential privilege escalation Affected: < 7.13.0 |
| CVE-2026-41059 | 8.2 | Apr 21 | OAuth2 Proxy has an Authentication Bypass via Fragment Confusion in skip_auth_routes and skip_auth_regex Affected: >= 7.5.0, < 7.15.2 |
Showing 2