OP
Vendor
Oauth2 Proxy Project
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-40575 | OP Oauth2 Proxy Oauth2 Proxy Project | 9.1 | Apr 21 | OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofing |
| CVE-2026-41059 | OP Oauth2 Proxy Oauth2 Proxy Project | 8.2 | Apr 21 | OAuth2 Proxy has an Authentication Bypass via Fragment Confusion in skip_auth_routes and skip_auth_regex |
| CVE-2026-40574 | OP Oauth2 Proxy Oauth2 Proxy Project | 6.8 | Apr 21 | OAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email Claims |
| CVE-2026-34457 | OP Oauth2 Proxy Oauth2 Proxy Project | 9.1 | Apr 14 | OAuth2 Proxy: Health Check User-Agent Matching Bypasses Authentication in auth_request Mode |
| CVE-2026-34454 | OP Oauth2 Proxy Oauth2 Proxy Project | 3.5 | Apr 14 | OAuth2 Proxy: Session cookie not cleared when rendering sign-in page |
| CVE-2025-54576 | OP Oauth2 Proxy Oauth2 Proxy Project | 9.1 | Jul 30 | OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups |
| CVE-2021-21411 | OP Oauth2 Proxy Oauth2 Proxy Project | 5.5 | Mar 26 | OAuth2-Proxy is an open source reverse proxy that provides authentication with Google, Github or other providers |
| CVE-2021-21291 | OP Oauth2 Proxy Oauth2 Proxy Project | 6.1 | Feb 2 | OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others) to validate accounts by email, domain… |
| CVE-2020-4037 | OP Oauth2 Proxy Oauth2 Proxy Project | 5.4 | Jun 29 | In OAuth2 Proxy from version 5.1.1 and less than version 6.0.0, users can provide a redirect address for the proxy to send the authenticated user to at the end of the… |
| CVE-2020-11053 | OP Oauth2 Proxy Oauth2 Proxy Project | 6.1 | May 7 | In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability |
| CVE-2020-5233 | OP Oauth2 Proxy Oauth2 Proxy Project | 6.1 | Jan 30 | OAuth2 Proxy before 5.0 has an open redirect vulnerability |
| CVE-2017-1000070 | OP Oauth2 Proxy Oauth2 Proxy Project | 6.1 | Jul 17 | The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow |
| CVE-2017-1000069 | OP Oauth2 Proxy Oauth2 Proxy Project | 8.8 | Jul 17 | CSRF in Bitly oauth2_proxy 2.1 during authentication flow |