openshift4/ose-oauth-proxy vulnerabilities

CVEs whose affected-version data names the openshift4/ose-oauth-proxy package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-49332High· 8.5

1mo ago

A flaw was found in openshift/oauth-proxy

A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only dash-variant keys (X-Forwarded-User) but does not strip underscore-variant keys (X_Forwarded_User) from incoming requests. WSGI and PHP f…

▾ TwilightRed Hat · openshift4/ose-oauth-proxyEPSS 0.30%via NVD