Oauth2_proxy_project Oauth2_proxy
13 CVEs affecting Oauth2_proxy_project Oauth2_proxy. Latest disclosed: 2026-04-22. Critical: 3, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-40575 | Critical | 9.1 | 2026-04-22 | OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 may trust a client-supplied `X-Forwarded-Uri… |
CVE-2026-34457 | Critical | 9.1 | 2026-04-14 | OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions prior to 7.15.2 contain a configuration-dependent authentication… |
CVE-2025-54576 | Critical | 9.1 | 2025-07-30 | OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load… |
CVE-2017-1000069 | High | 8.8 | 2017-07-17 | CSRF in Bitly oauth2_proxy 2.1 during authentication flow |
CVE-2026-41059 | High | 8.2 | 2026-04-22 | OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 have a configuration-dependent authenticatio… |
CVE-2020-11053 | High | 7.1 | 2020-05-07 | In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability. Users can provide a redirect address for the proxy to send the authenticated user to at… |
CVE-2026-40574 | Medium | 6.8 | 2026-04-21 | OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Prior to 7.15.2, an authorization bypass exists in OAuth2 Proxy as part of… |
CVE-2017-1000070 | Medium | 6.1 | 2017-07-17 | The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow. T… |
CVE-2020-5233 | Medium | 5.9 | 2020-01-30 | OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version… |
CVE-2021-21411 | Medium | 5.5 | 2021-03-26 | OAuth2-Proxy is an open source reverse proxy that provides authentication with Google, Github or other providers. The `--gitlab-group` flag for group-based aut… |
CVE-2021-21291 | Medium | 4.7 | 2021-02-02 | OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others) to validate accou… |
CVE-2020-4037 | Medium | 4.3 | 2020-06-29 | In OAuth2 Proxy from version 5.1.1 and less than version 6.0.0, users can provide a redirect address for the proxy to send the authenticated user to at the end… |
CVE-2026-34454 | Low | 3.5 | 2026-04-14 | OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. A regression introduced in 7.11.0 prevents OAuth2 Proxy from clearing the… |