github.com/ory/hydra vulnerabilities (Go)

3 vulnerabilities.

• github.com/ory/hydra Go Ory Hydra has a SQL injection via forged pagination tokens CVE-2026-33504 Fix available 7.2 HighMarch 20, 2026
• github.com/ory/hydra Go Disallow replay of `private_key_jwt` by blacklisting JTIs in Hydra CVE-2020-5300 Fix available 5.8 MediumApril 6, 2020
• github.com/ory/hydra Go Hydra has Reflected XSS via error_hint parameter CVE-2019-8400 Fix available 6.1 MediumFebruary 17, 2019