Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

Description

References

• GitHub Advisory GHSA-vfvf-6gx5-mqv6 · ADVISORY
• nvd.nist.gov/vuln/detail/CVE-2021-32701 · ADVISORY
• ory/oathkeeper commit 1f9f625 · FIX
• ory/oathkeeper#424 · FIX
• ory/oathkeeper security advisory · WEB

Más vulnerabilidades de github.com/ory/oathkeeper

• CVE-2026-33496ALTO 8.1ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rul…
• CVE-2026-33495MEDIO 6.5ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rul…
• CVE-2026-33494CRÍTICO 10.0ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rul…
• GO-2022-0406Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper
• GO-2023-1747Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper