Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/dexidp/dex

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/dexidp/dex in go

High
over 1 year ago

Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers GSA_kwCzR0hTQS1ncjc5LTl2NnYtZ2M5cs4AA430

go github.com/dexidp/dex
Critical
almost 3 years ago

Dex vulnerable to Man-in-the-Middle allowing ID token capture via intercepted authorization code GSA_kwCzR0hTQS12aDdnLXAyNmMtajJjd84AAvJw

go github.com/dexidp/dex
Critical
almost 4 years ago

Critical security issues in XML encoding in github.com/dexidp/dex MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW05aHAtN3I5OS05NGg1

go github.com/russellhaering/goxmldsig, github.com/dexidp/dex
Critical
almost 4 years ago

Authentication Bypass in dex MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ4MzItam05NS0yY3B4

go github.com/dexidp/dex

Filter by Severity

Critical 3 High 1