Skip to content

Known vulnerabilities in oauth2-proxy

Is your version affected?

CVE Summary Score Published
CVE-2026-76835 OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication,… 9.3 Critical Aug 24, 2026
CVE-2026-40575 OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers 9.1 Critical Apr 21, 2026
CVE-2026-34457 OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers 9.1 Critical Apr 14, 2026
CVE-2025-54576 OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component… 9.1 Critical Jul 30, 2025