CVE-2026-41059

>= 7.5.0 and < 7.15.2

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 have a configur

8.2HIGH

CVE-2026-40575

>= 7.5.0 and < 7.15.2

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 may trust a cli

9.1CRITICAL

CVE-2026-40574

< 7.15.2

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Prior to 7.15.2, an authorization bypass exis

6.8MEDIUM

CVE-2026-34457

< 7.15.2

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions prior to 7.15.2 contain a configurat

9.1CRITICAL

CVE-2026-34454

>= 7.11.0 and < 7.15.2

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. A regression introduced in 7.11.0 prevents OA

3.5LOW

CVE-2025-54576

< 7.11.0

OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into ex

9.1CRITICAL

CVE-2021-21411

>= 7.0.0 and < 7.1.0

OAuth2-Proxy is an open source reverse proxy that provides authentication with Google, Github or other providers. The `--gitlab-gr

5.5MEDIUM

CVE-2021-21291

< 7.0.0

OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers (Google, GitHub,

4.7MEDIUM

CVE-2020-4037

>= 5.1.1 and < 6.0.0

In OAuth2 Proxy from version 5.1.1 and less than version 6.0.0, users can provide a redirect address for the proxy to send the aut

4.3MEDIUM

CVE-2020-11053

< 5.1.1

In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability. Users can provide a redirect address for the proxy to send

7.1HIGH

CVE-2020-5233

< 5.0.0

OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This

5.9MEDIUM

CVE-2017-1000070

<= 2.1

The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination

6.1MEDIUM

CVE-2017-1000069

all versions

CSRF in Bitly oauth2_proxy 2.1 during authentication flow

8.8HIGH