OAuth2 Proxy 代码问题漏洞

OAuth2 Proxy is a product developed by OAuth2 Proxy organization that can provide a reverse proxy for authentication with Google, Github, or other providers. Versions of OAuth2 Proxy from 7.11.0 to 7.15.2 had code-related vulnerabilities. This vulnerability stemmed from a regression issue that...

PT-2026-32954

Name of the Vulnerable Software and Affected Versions OAuth2 Proxy versions 7.11.0 through 7.15.1 Description A regression prevents the reverse proxy from clearing the session cookie when rendering the sign-in page. In deployments relying on the sign-in page for the logout flow, the browser sessi...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: argocd-image-updater, spegel, cloudflared, gitaly, crossplane-provider-aws-iam, fscrypt, prometheus, kubernetes-csi-external-provisioner, rancher-helm, zarf, gogatekeeper, octo-sts, vault-benchmark, migrate, pulumi-language-java, docker-cli, cilium, azcopy,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, spegel, cloudflared, gitaly, crossplane-provider-aws-iam, fscrypt, prometheus, kubernetes-csi-external-provisioner, rancher-helm, zarf, gogatekeeper, octo-sts, vault-benchmark, migrate, pulumi-language-java, docker-cli, cilium, azcopy,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: thanos-operator, nats-top, github-mcp-server, cloudflared, gitaly, kubernetes-csi-external-provisioner, gogatekeeper, nri-rabbitmq, amazon-k8s-cni, octo-sts, migrate, azcopy, stern, smarter-device-manager, kyverno-policy-reporter-kyverno-plugin, litefs, rootlesskit,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: thanos-operator, nats-top, github-mcp-server, cloudflared, gitaly, kubernetes-csi-external-provisioner, gogatekeeper, nri-rabbitmq, amazon-k8s-cni, octo-sts, migrate, azcopy, stern, smarter-device-manager, kyverno-policy-reporter-kyverno-plugin, litefs, rootlesskit,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: thanos-operator, nats-top, github-mcp-server, cloudflared, gitaly, kubernetes-csi-external-provisioner, gogatekeeper, nri-rabbitmq, amazon-k8s-cni, octo-sts, migrate, azcopy, stern, smarter-device-manager, kyverno-policy-reporter-kyverno-plugin, litefs, rootlesskit,...

FreeBSD : oauth2-proxy -- multiple vulnerabilities (10319b08-f050-4beb-95e3-fe025cdafd25)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 10319b08-f050-4beb-95e3-fe025cdafd25 advisory. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields...

FreeBSD : oauth2-proxy -- multiple vulnerabilities (fb561db9-0fc1-4d92-81a2-ee01839c9119)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the fb561db9-0fc1-4d92-81a2-ee01839c9119 advisory. Within HostnameError.Error, when constructing an error string, there is no limit to the number...

The vulnerability of the OAuth2-Proxy proxy server, related to bypassing authentication through spoofing, allows attackers to gain unauthorized access to protected information.

The vulnerability of the OAuth2-Proxy proxy server relates to bypassing authentication through spoofing during the processing of the skipauthroutes parameter. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

GO-2025-4113 OAuth2-Proxy is vulnerable to header smuggling via underscore leading to potential privilege escalation in github.com/oauth2-proxy/oauth2-proxy

OAuth2-Proxy is vulnerable to header smuggling via underscore leading to potential privilege escalation in github.com/oauth2-proxy/oauth2-proxy...

OAuth2-Proxy is vulnerable to header smuggling via underscore leading to potential privilege escalation

Impact All deployments of OAuth2 Proxy in front of applications that normalize underscores to dashes in HTTP headers e.g., WSGI-based frameworks such as Django, Flask, FastAPI, and PHP applications. Authenticated users can inject underscore variants of X-Forwarded- headers that bypass the proxy’s...

EUVD-2025-50825

OAuth2-Proxy is vulnerable to header smuggling via underscore leading to potential privilege escalation...

CVE-2025-64484

A header-smuggling vulnerability was found in OAuth2-Proxy’s handling of HTTP headers containing underscores such as XForwardedFor. The proxy failed to properly normalize these header names, which could allow crafted requests to bypass header validation or filtering. When OAuth2-Proxy is deployed...

CVE-2025-64484

OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups. In versions prior to 7.13.0, all deployments of OAuth2 Proxy in front of applications that normalize underscores to dashe...

HTTP Header Injection

Overview Affected versions of this package are vulnerable to HTTP Header Injection via the processing of HTTP headers containing underscores, which are normalized to dashes by certain upstream applications. Authenticated users can escalate privileges by injecting specially crafted XForwarded-...

HTTP Header Injection

Overview Affected versions of this package are vulnerable to HTTP Header Injection via the processing of HTTP headers containing underscores, which are normalized to dashes by certain upstream applications. Authenticated users can escalate privileges by injecting specially crafted XForwarded-...

CVE-2025-64484

OAuth2-Proxy is affected by a header smuggling vulnerability where authenticated users can exploit underscores in HTTP header names (e.g., X_Forwarded_For) to bypass upstream header filtering, potentially escalating privileges in the application behind the proxy. The issue occurs in deployments t...

CVE-2025-64484 OAuth2-Proxy vulnerable to header smuggling via underscore, leading to potential privilege escalation

OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups. In versions prior to 7.13.0, all deployments of OAuth2 Proxy in front of applications that normalize underscores to dashe...

CVE-2025-64484 OAuth2-Proxy vulnerable to header smuggling via underscore, leading to potential privilege escalation

OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups. In versions prior to 7.13.0, all deployments of OAuth2 Proxy in front of applications that normalize underscores to dashe...