auth0

May 26, 2023 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Sep 7, 2022 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Aug 31, 2022 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 26, 2023 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jul 26, 2022 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 26, 2023 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 5, 2022 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Apr 22, 2022 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Mar 30, 2022 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Mar 4, 2022 GO-2022-0413 +3 more

  GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Feb 25, 2022 GO-2022-0413 +3 more

  GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Feb 11, 2022 GO-2022-0413 +3 more

  GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type ServiceAccount

+ ClientSecret string

+ Domain string

Jan 25, 2022 GO-2022-0413 +3 more

  GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jan 19, 2022 GO-2022-0413 +3 more

  GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Dec 22, 2021 GO-2022-0413 +3 more

  GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Dec 17, 2021 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Nov 15, 2021 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Nov 4, 2021 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Oct 22, 2021 GO-2021-0258 +3 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Oct 14, 2021 GO-2021-0258 +3 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Sep 17, 2021 GO-2021-0258 +3 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Sep 3, 2021 GO-2021-0258 +3 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Aug 25, 2021 GO-2021-0258 +3 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Aug 5, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Aug 26, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jun 24, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jun 16, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jun 7, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 24, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 21, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 17, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 13, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 4, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Apr 29, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Apr 22, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Apr 17, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Apr 6, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Mar 31, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Mar 12, 2021 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Feb 25, 2021 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Feb 22, 2021 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Feb 18, 2021 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Feb 15, 2021 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jan 13, 2021 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jan 8, 2021 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Dec 11, 2020 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Dec 7, 2020 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ const Name

+ type Option func(cfg *config)

+ func WithDomain(domain string) Option

+ func WithServiceAccount(serviceAccount *ServiceAccount) Option

+ type Provider struct

+ func New(options ...Option) *Provider

+ func (p *Provider) User(ctx context.Context, userID, accessToken string) (*directory.User, error)

+ func (p *Provider) UserGroups(ctx context.Context) ([]*directory.Group, []*directory.User, error)

+ type RoleManager interface

+ List func(opts ...management.ListOption) (r *management.RoleList, err error)

+ Users func(id string, opts ...management.ListOption) (u *management.UserList, err error)

+ type ServiceAccount struct

+ ClientID string

+ Secret string

+ func ParseServiceAccount(options directory.Options) (*ServiceAccount, error)

+ type UserManager interface

+ Read func(id string) (*management.User, error)

+ Roles func(id string, opts ...management.ListOption) (r *management.RoleList, err error)

Nov 19, 2020 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Nov 13, 2020 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium