OP
Product
Oauth2 Proxy
13
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 7Low 1
Watch
Add Oauth2 Proxy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40575 | 9.1 | Apr 21 | OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofing Affected: 7.5.0 before 7.15.2 |
| CVE-2026-34457 | 9.1 | Apr 14 | OAuth2 Proxy: Health Check User-Agent Matching Bypasses Authentication in auth_request Mode Affected: before 7.15.2 |
| CVE-2025-54576 | 9.1 | Jul 30 | OAuth2-Proxy has authentication bypass in oauth2-proxy skip_auth_routes due to Query Parameter inclusion Affected: before 7.11.0 |
Showing 3