github.com/dexidp/dex vulnerabilities (Go)

5 vulnerabilities.

• github.com/dexidp/dex Go Dex: Token-exchange endpoint is missing AllowedConnectors enforcement GHSA-7qjx-gp9h-65qj Fix available 8.7 HighJune 9, 2026
• github.com/dexidp/dex Go Dex 2.37.0 is discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers CVE-2024-23656 Fix available 7.5 HighJanuary 25, 2024
• github.com/dexidp/dex Go OAuth authorization code exposure in Dex CVE-2022-39222 Fix available 9.3 CriticalOctober 3, 2022
• github.com/dexidp/dex Go Authentication Bypass in dex CVE-2020-27847 Fix available 9.8 CriticalDecember 28, 2020
• github.com/dexidp/dex Go Critical security issues in XML encoding in Dex CVE-2020-26290 Fix available 9.3 CriticalDecember 28, 2020