All 4 CVE vulnerabilities found in oathkeeper, with AI-generated Chinese analysis, references, and POCs.
Vendor: ory
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-33496 | Ory Oathkeeper has an authentication bypass by cache key confusion CWE-1289 | 8.1 | High | 2026-03-26 |
| CVE-2026-33495 | Ory Oathkeeper has an authentication bypass by usage of untrusted header CWE-862 | 6.5 | Medium | 2026-03-26 |
| CVE-2026-33494 | Ory Oathkeeper has a path traversal authorization bypass CWE-23 | 10.0 | Critical | 2026-03-26 |
| CVE-2021-32701 | Possible bypass of token claim validation when OAuth2 Introspection caching is enabled CWE-863 | 7.5 | High | 2021-06-22 |
All 4 known CVE vulnerabilities affecting oathkeeper with full Chinese analysis, references, and POCs where available.