CVE-2026-33186

CVE-2026-33186 gRPC-Go RBAC Authorization Policy Bypass via Missing :path Slash Auth Bypass Описание Пакет authz в google.golang.org/grpc реализует авторизацию RBAC на уровне SDK с использованием правил deny и allow, сопоставляемых с псевдозаголовком :path. Транспорт HTTP/2 сервера хранит...

CVE-2026-33495

ORY Oathkeeper is an Identity & Access Proxy IAP and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. Ory Oathkeeper is often deployed behind other components like CDNs, WAFs, or reverse proxies. Depending on the setup, another component might forward the...