github.com/pomerium/pomerium vulnerabilities
CVEs whose affected-version data names the github.com/pomerium/pomerium package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2021-41230Medium· 5.3OIDC claims not updated from Identity Provider in Pomerium
OIDC claims not updated from Identity Provider in Pomerium
▾ Sunlitpomerium · github.com/pomerium/pomeriumEPSS 0.86%via OSV
CVE-2021-29652Medium· 6.1pomerium_signature is not verified in middleware in github.com/pomerium/pomerium
pomerium_signature is not verified in middleware in github.com/pomerium/pomerium
▾ Sunlitpomerium · github.com/pomerium/pomeriumEPSS 0.66%via OSV
CVE-2021-29651Medium· 6.3JWT leak via Open Redirect in Programmatic access
JWT leak via Open Redirect in Programmatic access
▾ Sunlitpomerium · github.com/pomerium/pomeriumEPSS 0.66%via OSV