Skip to content

Known vulnerabilities in oauth2-proxy

Is your version affected?

CVE Summary Score Published
CVE-2026-76835 OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication,… 9.3 Critical Aug 24, 2026
CVE-2026-40575 OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers 9.1 Critical Apr 21, 2026
CVE-2026-41059 OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers 8.2 High Apr 21, 2026
CVE-2026-40574 OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers 6.8 Medium Apr 21, 2026
CVE-2026-34457 OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers 9.1 Critical Apr 14, 2026
CVE-2026-34454 OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers 3.5 Low Apr 14, 2026
CVE-2025-64484 OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component… 8.5 High Nov 10, 2025
CVE-2025-54576 OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component… 9.1 Critical Jul 30, 2025
CVE-2021-21411 OAuth2-Proxy is an open source reverse proxy that provides authentication with Google, Github or other providers 5.5 Medium Mar 26, 2021
CVE-2021-21291 OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers… 4.7 Medium Feb 2, 2021