github.com/ory/kratos vulnerabilities (Go)

2 vulnerabilities.

• github.com/ory/kratos Go Ory Kratos has a SQL injection via forged pagination tokens CVE-2026-33503 Fix available 7.2 HighMarch 20, 2026
• github.com/ory/kratos Go Ory Kratos's `highest_available` setting does not properly respect code + mfa credentials CVE-2024-45042 Fix available 4.4 MediumSeptember 26, 2024