Browse CVEs

CRITICAL 9.1 CVE-2026-40575 OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 may trust a client-supplied `X-For… Oauth2 Proxy 7.15.2+ Fix from $2,3002026-04-22 HIGH 8.2 CVE-2026-41059 OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 have a configuration-dependent aut… Oauth2 Proxy 7.15.2+ Fix from $1,9502026-04-22 MEDIUM 6.8 CVE-2026-40574 OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Prior to 7.15.2, an authorization bypass exists in OAuth2 Proxy … Oauth2 Proxy 7.15.2+ Fix from $1,6002026-04-21 CRITICAL 9.1 CVE-2026-34457 OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions prior to 7.15.2 contain a configuration-dependent authe… Oauth2 Proxy 7.15.2+ Fix from $2,3002026-04-14 CRITICAL 9.1 CVE-2025-54576 OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse prox… Oauth2 Proxy 7.11.0+ Fix from $2,3002025-07-30 MEDIUM 5.5 CVE-2021-21411 OAuth2-Proxy is an open source reverse proxy that provides authentication with Google, Github or other providers. The `--gitlab-group` flag for group… Oauth2 Proxy 7.1.0+ Fix from $1,6002021-03-26 MEDIUM 6.1 CVE-2021-21291 OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others) to vali… Oauth2 Proxy 7.0.0+ Fix from $1,6002021-02-02 MEDIUM 5.4 CVE-2020-4037 In OAuth2 Proxy from version 5.1.1 and less than version 6.0.0, users can provide a redirect address for the proxy to send the authenticated user to … Oauth2 Proxy 6.0.0+ Fix from $1,6002020-06-29 MEDIUM 6.1 CVE-2020-11053 In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability. Users can provide a redirect address for the proxy to send the authenticated u… Oauth2 Proxy 5.1.1+ Fix from $1,6002020-05-07 MEDIUM 6.1 CVE-2020-5233 OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched i… Oauth2 Proxy 5.0.0+ Fix from $1,6002020-01-30 HIGH 8.8 CVE-2017-1000069 CSRF in Bitly oauth2_proxy 2.1 during authentication flow Oauth2 Proxy Patch available Fix from $1,9502017-07-17 MEDIUM 6.1 CVE-2017-1000070 The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAu… Oauth2 Proxy after 2.1 Fix from $1,6002017-07-17