Login Request a demo
PO
Product
pomerium
by pomerium · last CVE Sep 17, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 2High 5Medium 3Low 0
Severity
All severities10Critical2High5Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add pomerium to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-33189
9.8
1%
May 30
Pomerium is an identity and context-aware access proxy
Affected: before 0.17.4; 0.19.0 before 0.19.2; 0.21.0 before 0.21.4; 0.22.0 before 0.22.2; 0.18.0; 0.20.0
CVE-2022-24797
9.1
1%
Mar 31
Pomerium is an identity-aware access proxy
Affected: 0.16.0 before 0.17.1
CVE-2021-41230
8.8
1%
Nov 5
Pomerium is an open source identity-aware access proxy
Affected: 0.14.0 before 0.15.6
CVE-2021-39206
8.6
1%
Sep 9
Pomerium is an open source identity-aware access proxy
Affected: 0.11.0 before 0.14.8; 0.15.0
CVE-2021-39162
8.6
2%
Sep 9
Pomerium is an open source identity-aware access proxy
Affected: 0.15.0
CVE-2026-50285
7.5
1%
Sep 17
Pomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback
Affected: < 0.32.8
CVE-2021-39204
7.5
2%
Sep 9
Pomerium is an open source identity-aware access proxy
Affected: before 0.14.8; 0.15.0
CVE-2024-39315
6.5
0%
Jul 2
Pomerium is an identity and context-aware access proxy
Affected: before 0.26.1
CVE-2021-29652
6.1
1%
Apr 2
Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process
Affected: 0.10.0 through 0.13.3
CVE-2021-29651
6.1
1%
Apr 2
Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2)
Affected: before 0.13.4
Showing 10