CVE-2025-54576

Observations on CVE-2025-54576 : OAuth2-Proxy versions up to 7.10.0 expose an authentication bypass when using skip_auth_routes with regex patterns, because skip_auth_routes can match the full request URI (path + query parameters) instead of only the path. This allows an attacker to craft URLs wi...

CVE-2020-11053

Summary: Vulnerability in OAuth2 Proxy prior to 5.1.1 allows an open redirect by bypassing redirect URL validation through HTML-encoded whitespace characters. This could let an attacker steer an authenticated user to an arbitrary URL after login. The issue is mitigated in version 5.1.1 by patchin...

CVE-2021-21291

CVE-2021-21291: OAuth2 Proxy (open-source reverse proxy) before v7.0.0 had a vulnerability in the whitelist-domain feature where a domain matched for redirects could be broader than intended (e.g., .example.com could match example.com and badexample.com). This could allow unintended redirects. Im...

CVE-2020-5233

CVE-2020-5233 affects the OAuth2 Proxy project (github.com/pusher/oauth2_proxy) prior to version 5.0, where an open redirect vulnerability exists in the redirect handling. The vulnerable component is the redirect/redirect URL validation path, enabling an attacker to silently harvest authenticatio...

CVE-2026-40574

CVE-2026-40574 affects OAuth2 Proxy. Affected: deployments using email_domain restrictions. Issue: authorization bypass where an attacker can use a malformed multi-@ email claim (e.g., [email protected]@company.com) to satisfy a company.com domain check, even though the claim is not a valid email...

CVE-2026-34457

CVE-2026-34457 affects OAuth2 Proxy prior to 7.15.2. In deployments using an auth_request-style integration (e.g., nginx auth_request) with either --ping-user-agent or --gcp-healthchecks enabled, any request bearing the configured health-check User-Agent is treated as authenticated, bypassing log...