Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

概要

参考情報

• ory/oathkeeper security advisory · ADVISORY

github.com/ory/oathkeeper のその他の脆弱性

• CVE-2026-33496高 8.1ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rul…
• CVE-2026-33495中 6.5ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rul…
• CVE-2026-33494緊急 10.0ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rul…
• GO-2022-0920Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper
• GO-2023-1747Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper