Skip to content
Ory vulnerabilities
Newest
-
cardano-scaling hydra
Hydra: Deposit Claim omits Head state-token spending requirement
CVE-2026-62162
8.2 High
-
hydra-ecosystem hydra
Hydra instantiate target blacklist bypasses permit code execution
CVE-2026-106442
Fix available
7.8 High
-
hydra-ecosystem hydra
Hydra logging configuration permits unsafe callable resolution
CVE-2026-106441
Fix available
7.8 High
-
hydra-ecosystem hydra
Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method
CVE-2026-106440
Fix available
7.8 High
-
hydra-ecosystem hydra
Hydra: Mutable instantiate policy sets allow target blocklist bypass
CVE-2026-106439
Fix available
8.5 High
-
facebookresearch hydra
Hydra: hydra.utils.instantiate with untrusted config can lead to code execution
CVE-2026-68508
Fix available
7.8 High
-
ory polis
DOM-Based XSS in Ory Polis Login Page
CVE-2026-33506
8.8 High
-
ory keto
Ory Keto has a SQL injection via forged pagination tokens
CVE-2026-33505
Fix available
7.2 High
-
ory hydra
Ory Hydra has a SQL injection via forged pagination tokens
CVE-2026-33504
Fix available
7.2 High
-
go-kratos kratos
Ory Kratos has a SQL injection via forged pagination tokens
CVE-2026-33503
Fix available
7.2 High
-
ory oathkeeper
Ory Oathkeeper has a path traversal authorization bypass
CVE-2026-33494
Fix available
10.0 Critical
-
ory oathkeeper
Ory Oathkeeper has an authentication bypass by cache key confusion
CVE-2026-33496
Fix available
8.1 High
-
ory oathkeeper
Ory Oathkeeper has an authentication bypass by usage of untrusted header
CVE-2026-33495
Fix available
6.5 Medium
-
nixos hydra
Hydra missing authentication when triggering evaluations through GitHub and Gitea plugins
CVE-2025-54864
6.9 Medium
-
nixos hydra
Hydra persistent XSS in build metrics
CVE-2025-54800
7.1 High
-
cardano-scaling hydra
hydra-node dangerously assumes L1 event finality and does not consider failed transactions
CVE-2025-48886
4.8 Medium
-
nixos hydra
Hydra no restricted eval after nix-eval-jobs migration
CVE-2025-32435
2.6 Low
-
go-kratos kratos
Ory Kratos's `highest_available` setting does not properly respect code + mfa credentials
CVE-2024-45042
Fix available
4.4 Medium
-
nixos hydra
Nix Hydra Missing authentication when triggering evaluations
CVE-2024-45049
7.5 High
-
nixos hydra
Hydra has persistent XSS vulnerability serving HTML build outputs
CVE-2024-32657
4.6 Medium
-
input-output-hk hydra
Malicious head initialiser can extract PTs from control of Hydra scripts, leading to locked participant commits or spoofed commits
CVE-2023-42449
8.1 High
-
input-output-hk hydra
Hydra's contestation period in head datum can be modified during Close transaction, allowing malicious participant to freely modify the contestation deadline
CVE-2023-42448
8.1 High
-
input-output-hk hydra
Hydra's committed UTxOs at Commit validator and UTxOs at Initial validator can be spent arbitrarily by anyone
CVE-2023-38701
9.1 Critical
-
input-output-hk hydra
Snapshot signature not including HeadID will allow replay attacks
CVE-2023-42806
6.5 Medium
-
ory oathkeeper
Possible bypass of token claim validation when OAuth2 Introspection caching is enabled
CVE-2021-32701
Fix available
7.5 High
-
ory fosite
OAuth2 Redirect URL validity does not respect query parameters and character casing for loopback addresses
CVE-2020-15233
Fix available
6.1 Medium
-
ory fosite
Redirect URL matching ignores character casing
CVE-2020-15234
Fix available
6.1 Medium
-
ory fosite
Replay of private_key_jwt possible in ORY Fosite
CVE-2020-15222
Fix available
8.1 High
-
ory fosite
Ignored storage errors on token revokation in ORY Fosite
CVE-2020-15223
Fix available
8.0 High
-
ory hydra
Disallow replay of `private_key_jwt` by blacklisting JTIs in Hydra
CVE-2020-5300
Fix available
5.8 Medium
-
ory hydra
Hydra has Reflected XSS via error_hint parameter
CVE-2019-8400
Fix available
6.1 Medium