Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Pomerium
MEDIUM 6.5
CVE-2024-39315
Pomerium is an identity and context-aware access proxy. Prior to version 0.26.1, the Pomerium user info page (at `/.pomerium`) unintentionally includ…
Fix: 0.26.1+
Fix from $1,600
2024-07-02
Pomerium
CRITICAL 9.8
CVE-2023-33189
Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Pomerium. T…
Fix: 0.17.4 / 0.19.2+
Fix from $2,300
2023-05-30
Pomerium
CRITICAL 9.1
CVE-2022-24797
Pomerium is an identity-aware access proxy. In distributed service mode, Pomerium's Authenticate service exposes pprof debug and prometheus metrics h…
Fix: 0.17.1+
Fix from $2,300
2022-03-31
Pomerium
HIGH 8.8
CVE-2021-41230
Pomerium is an open source identity-aware access proxy. In affected versions changes to the OIDC claims of a user after initial login are not reflect…
Fix: 0.15.6+
Fix from $1,950
2021-11-05
Pomerium
MEDIUM 6.1
CVE-2021-29651
Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2).
Fix: 0.13.4+
Fix from $1,600
2021-04-02
Pomerium
MEDIUM 6.1
CVE-2021-29652
Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process
Fix: after 0.13.3
Fix from $1,600
2021-04-02