Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

Mô tả

Tham khảo

• ory/oathkeeper security advisory · ADVISORY

Lỗ hổng khác của github.com/ory/oathkeeper

• CVE-2026-33496CAO 8.1ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rul…
• CVE-2026-33495TRUNG BÌNH 6.5ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rul…
• CVE-2026-33494NGHIÊM TRỌNG 10.0ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rul…
• GO-2022-0920Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper
• GO-2023-1747Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper