OP
Product
Oauth2 Proxy
13
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 7Low 1
Watch
Add Oauth2 Proxy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40574 | 6.8 | Apr 21 | OAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email Claims Affected: before 7.15.2 |
| CVE-2021-21291 | 6.1 | Feb 2 | OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others) to validate accounts by email, domain… Affected: before 7.0.0 |
| CVE-2020-11053 | 6.1 | May 7 | In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability Affected: before 5.1.1 |
| CVE-2020-5233 | 6.1 | Jan 30 | OAuth2 Proxy before 5.0 has an open redirect vulnerability Affected: before 5.0.0 |
| CVE-2017-1000070 | 6.1 | Jul 17 | The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow Affected: through 2.1 |
| CVE-2021-21411 | 5.5 | Mar 26 | OAuth2-Proxy is an open source reverse proxy that provides authentication with Google, Github or other providers Affected: 7.0.0 before 7.1.0 |
| CVE-2020-4037 | 5.4 | Jun 29 | In OAuth2 Proxy from version 5.1.1 and less than version 6.0.0, users can provide a redirect address for the proxy to send the authenticated user to at the end of the… Affected: 5.1.1 before 6.0.0 |
Showing 7