| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/pomerium/pomerium | ≥ 0.18.0, < 0.18.1≥ 0.19.0, < 0.19.2≥ 0.20.0, < 0.20.1≥ 0.21.0, < 0.21.4≥ 0.22.0, < 0.22.2< 0.17.4 | 0.18.10.19.20.20.10.21.40.22.20.17.4 |
| pomerium | = 0.18.0= 0.20.0≥ 0.19.0, < 0.19.2≥ 0.21.0, < 0.21.4≥ 0.22.0, < 0.22.2< 0.17.4 | 0.19.20.21.40.22.20.17.4 |
With specially crafted requests, incorrect authorization decisions may be made by Pomerium.
We are releasing patch fixes to address this vulnerability going back to v0.17.X. Please upgrade to:
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free