ory oathkeeper vulnerabilities

4 published CVEs name ory oathkeeper among the affected products.

All 4 in the list Atom feed of new CVEs

Published CVEs: 4
Last 12 months: 3
Critical: 1
Known exploited: 0

Critical 1High 2Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

20211
20263

Newest CVEs

CVE-2026-33496
Ory Oathkeeper has an authentication bypass by cache key confusion
ory · oathkeeper
High8.1
CVE-2026-33495
Ory Oathkeeper has an authentication bypass by usage of untrusted header
ory · oathkeeper
Medium6.5
CVE-2026-33494
Ory Oathkeeper has a path traversal authorization bypass
ory · oathkeeper
Critical10.0
CVE-2021-32701
Possible bypass of token claim validation when OAuth2 Introspection caching is enabled
ory · oathkeeper
High7.5

Most common weaknesses