Security Advisories for github.com/oauth2-proxy/oauth2-proxy/v7 in go
High
about 2 months ago
OAuth2 Proxy has an Authentication Bypass via Fragment Confusion in skip_auth_routes and skip_auth_regex
go
github.com/oauth2-proxy/oauth2-proxy/v7
Moderate
about 2 months ago
OAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email Claims
go
github.com/oauth2-proxy/oauth2-proxy/v7
Critical
about 2 months ago
OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofing
go
github.com/oauth2-proxy/oauth2-proxy/v7
Critical
about 2 months ago
OAuth2 Proxy's Health Check User-Agent Matching Bypasses Authentication in auth_request Mode
go
github.com/oauth2-proxy/oauth2-proxy, github.com/oauth2-proxy/oauth2-proxy/v7
Low
about 2 months ago
OAuth2 Proxy's session cookies are not cleared when rendering sign-in page
go
github.com/oauth2-proxy/oauth2-proxy/v7
High
7 months ago
OAuth2-Proxy is vulnerable to header smuggling via underscore leading to potential privilege escalation
go
github.com/oauth2-proxy/oauth2-proxy/v7
Critical
10 months ago
OAuth2-Proxy has authentication bypass in oauth2-proxy skip_auth_routes due to Query Parameter inclusion
go
github.com/oauth2-proxy/oauth2-proxy/v7
Moderate
10 months ago
OAuth2-Proxy's `--gitlab-group` GitLab Group Authorization config flag stopped working in v7.0.0
go
github.com/oauth2-proxy/oauth2-proxy/v7
Low
about 5 years ago
Subdomain checking of whitelisted domains could allow unintended redirects in oauth2-proxy
go
github.com/oauth2-proxy/oauth2-proxy, github.com/oauth2-proxy/oauth2-proxy/v7