pomerium vulnerabilities
9 published CVEs name pomerium among the affected products.
- 9Published CVEs9 of them scored
- 1Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-50285
Pomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback
pomerium · pomerium
High7.5 - CVE-2024-47616
Pomerium's service account access token may grant unintended access to databroker API
pomerium · pomerium
Medium6.8 - CVE-2024-39315
Pomerium exposed OAuth2 access and ID tokens in user info endpoint response
pomerium · pomerium
Medium5.7 - CVE-2023-33189
Incorrect Authorization with specially crafted requests
pomerium · pomerium
Critical10.0 - CVE-2022-24797
Exposure of Sensitive Information in Pomerium
pomerium · pomerium
Medium6.5 - CVE-2021-41230
OIDC claims not updated from Identity Provider in Pomerium
pomerium · pomerium
Medium5.3 - CVE-2021-39206
Incorrect Authorization with specially crafted requests
pomerium · pomerium
High8.6 - CVE-2021-39204
Excessive CPU usage in Pomerium
pomerium · pomerium
High7.5 - CVE-2021-39162
Incorrect handling of H2 GOAWAY + SETTINGS frames
pomerium · pomerium
High8.6