pomerium vulnerabilities

CVEs per yearBy the year they were published

1. 20214
2. 20221
3. 20231
4. 20242
5. 20261

Newest CVEs

• CVE-2026-50285

  Pomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback

  pomerium · pomerium

  High7.5
• CVE-2024-47616

  Pomerium's service account access token may grant unintended access to databroker API

  pomerium · pomerium

  Medium6.8
• CVE-2024-39315

  Pomerium exposed OAuth2 access and ID tokens in user info endpoint response

  pomerium · pomerium

  Medium5.7
• CVE-2023-33189

  Incorrect Authorization with specially crafted requests

  pomerium · pomerium

  Critical10.0
• CVE-2022-24797

  Exposure of Sensitive Information in Pomerium

  pomerium · pomerium

  Medium6.5
• CVE-2021-41230

  OIDC claims not updated from Identity Provider in Pomerium

  pomerium · pomerium

  Medium5.3
• CVE-2021-39206

  Incorrect Authorization with specially crafted requests

  pomerium · pomerium

  High8.6
• CVE-2021-39204

  Excessive CPU usage in Pomerium

  pomerium · pomerium

  High7.5
• CVE-2021-39162

  Incorrect handling of H2 GOAWAY + SETTINGS frames

  pomerium · pomerium

  High8.6