github.com/dexidp/dex vulnerabilities
CVEs whose affected-version data names the github.com/dexidp/dex package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
GHSA-7qjx-gp9h-65qjHigh· 8.7Dex: Token-exchange endpoint is missing AllowedConnectors enforcement
Dex: Token-exchange endpoint is missing AllowedConnectors enforcement
▾ Twilightdexidp · github.com/dexidp/dexvia GHSA
CVE-2020-26290Critical· 9.8Authentication Bypass in dex
Authentication Bypass in dex
▾ Midnightdexidp · github.com/dexidp/dexEPSS 0.99%via OSV