Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

Description

References

• ory/oathkeeper security advisory · ADVISORY

Más vulnerabilidades de github.com/ory/oathkeeper

• CVE-2026-33496ALTO 8.1ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rul…
• CVE-2026-33495MEDIO 6.5ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rul…
• CVE-2026-33494CRÍTICO 10.0ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rul…
• GO-2022-0920Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper
• GO-2023-1747Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper