oauth2-proxy vulnerabilities

Known vulnerabilities in the oauth2-proxy package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L CVE-2025-22874	<7.9.0-r2
L CVE-2025-4673	<7.9.0-r2
L GHSA-6f52-wpx2-hvf2	<7.9.0-r2
L GHSA-62jj-gr2r-5c34	<7.9.0-r2
L CVE-2025-22871	<7.8.2-r1
L GHSA-vvgc-356p-c3xw	<7.8.2-r2
L CVE-2025-22872	<7.8.2-r2
L GHSA-g9pc-8g42-g6vq	<7.8.2-r1
L GHSA-92cp-5422-2mw7	<7.8.2-r0
L Asymmetric Resource Consumption (Amplification)	<7.8.2-r0
L GHSA-mh63-6h87-95cp	<7.8.2-r0
L Improper Input Validation	<7.8.2-r0
L CVE-2025-22870	<7.8.1-r4
L GHSA-qxp5-gwg8-xv66	<7.8.1-r4
L CVE-2025-22868	<7.8.1-r4
L CVE-2025-22869	<7.8.1-r4
L GHSA-c6gw-w398-hv78	<7.8.1-r3
L Allocation of Resources Without Limits or Throttling	<7.8.1-r3
L GHSA-3whm-j4xm-rv8x	<7.8.1-r2
L CVE-2025-22866	<7.8.1-r2
L CVE-2024-45336	<7.8.1-r1
L GHSA-3f6r-qh9c-x6mm	<7.8.1-r1
L CVE-2024-45341	<7.8.1-r1
L GHSA-7wrw-r4p8-38rx	<7.8.1-r1
L CVE-2024-45338	<7.7.1-r3
L GHSA-w32m-9786-jp63	<7.7.1-r3
L CVE-2024-45337	<7.7.1-r1
L GHSA-v778-237x-gjrc	<7.7.1-r1
L CVE-2024-34156	<7.6.0-r10
L GHSA-j7vj-rw65-4v26	<7.6.0-r10
L GHSA-8xfx-rj4p-23jm	<7.6.0-r10
L CVE-2024-34158	<7.6.0-r10
L CVE-2024-34155	<7.6.0-r10
L GHSA-crqm-pwhx-j97f	<7.6.0-r10
L GHSA-hw49-2p59-3mhj	<7.6.0-r9
L CVE-2024-24791	<7.6.0-r9
L GHSA-236w-p7wf-5ph8	<7.6.0-r8
M CVE-2024-24789	<7.6.0-r8
C CVE-2024-24790	<7.6.0-r8
L GHSA-49gw-vxvf-fc2g	<7.6.0-r8
L CVE-2024-24787	<7.6.0-r7
L GHSA-5fq7-4mxc-535h	<7.6.0-r7
L GHSA-2jwv-jmq4-4j3r	<7.6.0-r7
L CVE-2024-24788	<7.6.0-r7
L CVE-2023-45288	<7.6.0-r6
L GHSA-4v7x-pqxf-cx7m	<7.6.0-r6
L CVE-2024-24786	<7.6.0-r3
L GHSA-8r3f-844c-mc37	<7.6.0-r3
L CVE-2024-28180	<7.6.0-r2
L GHSA-c5q2-7r4c-mv6g	<7.6.0-r2
M Improper Validation of Integrity Check Value	<7.5.1-r8
L GHSA-45x7-px36-x8w8	<7.5.1-r8
L GHSA-4374-p667-p6c8	<7.5.1-r3
L GHSA-m425-mq94-257g	<7.5.1-r4
L GHSA-qppj-fm5r-hxr3	<7.5.1-r4
L GHSA-2wrh-6pvc-2jm9	<7.5.1-r3
L GHSA-2c7c-3mj9-8fqh	<7.5.1-r5
H Allocation of Resources Without Limits or Throttling	<7.5.1-r3
H CVE-2023-44487	<7.5.1-r4
M Cross-site Scripting (XSS)	<7.5.1-r3

Vulnerability

Vulnerable Version

<7.9.0-r2

<7.9.0-r2

<7.9.0-r2

<7.9.0-r2

<7.8.2-r1