Ory Kratos vulnerabilities

• go-kratos kratos Ory Kratos has a SQL injection via forged pagination tokens CVE-2026-33503 Fix available 7.2 HighMarch 20, 2026
• go-kratos kratos Ory Kratos's `highest_available` setting does not properly respect code + mfa credentials CVE-2024-45042 Fix available 4.4 MediumSeptember 26, 2024