OA
Vendor
oauth2-proxy
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-76835 | OA oauth2-proxy oauth2-proxy | 9.1 | Aug 24 | OAuth2 Proxy 7.15.2 through 7.15.4 Authentication Bypass via X-Forwarded-Uri Under the Default Trusted Proxy Set |
| CVE-2026-40575 | OA oauth2-proxy oauth2-proxy | 9.1 | Apr 21 | OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofing |
| CVE-2026-41059 | OA oauth2-proxy oauth2-proxy | 8.2 | Apr 21 | OAuth2 Proxy has an Authentication Bypass via Fragment Confusion in skip_auth_routes and skip_auth_regex |
| CVE-2026-40574 | OA oauth2-proxy oauth2-proxy | 6.8 | Apr 21 | OAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email Claims |
| CVE-2026-34457 | OA oauth2-proxy oauth2-proxy | 9.1 | Apr 14 | OAuth2 Proxy: Health Check User-Agent Matching Bypasses Authentication in auth_request Mode |
| CVE-2026-34454 | OA oauth2-proxy oauth2-proxy | 3.5 | Apr 14 | OAuth2 Proxy: Session cookie not cleared when rendering sign-in page |