pkg:Go/github.com/oauth2-proxy/oauth2-proxy

All known vulnerabilities

• CRITICAL9.1CVE-2026-34457OAuth2 Proxy: Health Check User-Agent Matching Bypasses Authentication in auth_request Mode
  from 0, <= 3.2.0
• CRITICAL9.1CVE-2025-54576OAuth2-Proxy has authentication bypass in oauth2-proxy skip_auth_routes due to Query Parameter inclusion
  from 0
• HIGH8.5CVE-2025-64484OAuth2-Proxy vulnerable to header smuggling via underscore, leading to potential privilege escalation
  from 0
• HIGH7.1Open Redirect in OAuth2 Proxy
  from 0, < 5.1.1
• MEDIUM5.9Open Redirect in OAuth2 Proxy
  from 0, < 5.0.0
• MEDIUM5.5Incorrect authorization in OAuth2-Proxy
  from 0
• MEDIUM5.4Subdomain checking of whitelisted domains could allow unintended redirects
  from 0
• MEDIUM5.4Subdomain checking of whitelisted domains could allow unintended redirects
  from 0, <= 3.2.0
• MEDIUM4.3Open Redirect in OAuth2 Proxy
  >= 5.1.1, < 6.0.0