oauth2-proxy Summary

Latest vulnerabilities published by oauth2-proxy

JSON RSS CSV 🔔 Create Alert Trigger

21 April 2026

Authentication Bypass Vulnerability in OAuth2 Proxy by Oauth2-Proxy
CVE-2026-40575
Oauth2-proxyOauth2-proxy9.1CRITICAL
Authentication Bypass in OAuth2 Proxy Affects Multiple Versions
CVE-2026-41059
Oauth2-proxyOauth2-proxy8.2HIGH
Authorization Bypass in OAuth2 Proxy Affects Email Domain Enforcement
CVE-2026-40574
Oauth2-proxyOauth2-proxy6.8MEDIUM

14 April 2026

Configuration-Dependent Authentication Bypass in OAuth2 Proxy by Oauth2 Proxy
CVE-2026-34457
Oauth2-proxyOauth2-proxy9.1CRITICAL
Session Management Flaw in OAuth2 Proxy Affects User Logout Process
CVE-2026-34454
Oauth2-proxyOauth2-proxy3.5LOW

10 November 2025

Privilege Escalation Vulnerability in OAuth2-Proxy Affecting Multiple Applications
CVE-2025-64484
Oauth2-proxyOauth2-proxy8.5HIGH

30 July 2025

Authentication Bypass Vulnerability in OAuth2-Proxy by Oauth2-Proxy
CVE-2025-54576
Oauth2-ProxyOAuth2-Proxy👾📰

26 March 2021

Incorrect authorization in OAuth2-Proxy
CVE-2021-21411
Oauth2-proxyOauth2-proxy5.5MEDIUM

2 February 2021

Subdomain checking of whitelisted domains could allow unintended redirects
CVE-2021-21291
Oauth2-proxyOauth2-proxy4.7MEDIUM