Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

概要

参考情報

• GitHub Advisory GHSA-vfvf-6gx5-mqv6 · ADVISORY
• nvd.nist.gov/vuln/detail/CVE-2021-32701 · ADVISORY
• ory/oathkeeper commit 1f9f625 · FIX
• ory/oathkeeper#424 · FIX
• ory/oathkeeper security advisory · WEB

github.com/ory/oathkeeper のその他の脆弱性

• CVE-2026-33496高 8.1ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rul…
• CVE-2026-33495中 6.5ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rul…
• CVE-2026-33494緊急 10.0ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rul…
• GO-2022-0406Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper
• GO-2023-1747Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper