Login Request a demo
PO
Product
pomerium
by pomerium · last CVE Sep 17, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 2High 5Medium 4Low 0
Severity
All severities11Critical2High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add pomerium to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-33189
9.8
1%
May 30
Incorrect Authorization with specially crafted requests
Affected: >= 0.22.0, < 0.22.2; >= 0.21.0, < 0.21.4; >= 0.20.0, < 0.20.1; >= 0.19.0, < 0.19.2; >= 0.18.0, < 0.18.1; < 0.17.4
CVE-2022-24797
9.1
1%
Mar 31
Exposure of Sensitive Information in Pomerium
Affected: >= v0.16.0, < v0.17.1
CVE-2021-41230
8.8
1%
Nov 5
Pomerium is an open source identity-aware access proxy
Affected: 0.14.0 before 0.15.6
CVE-2021-39206
8.6
1%
Sep 9
Pomerium is an open source identity-aware access proxy
Affected: 0.11.0 before 0.14.8; 0.15.0
CVE-2021-39162
8.6
2%
Sep 9
Pomerium is an open source identity-aware access proxy
Affected: 0.15.0
CVE-2026-50285
7.5
1%
Sep 17
Pomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback
Affected: < 0.32.8
CVE-2021-39204
7.5
2%
Sep 9
Pomerium is an open source identity-aware access proxy
Affected: before 0.14.8; 0.15.0
CVE-2024-47616
6.8
1%
Oct 2
Pomerium's service account access token may grant unintended access to databroker API
Affected: < 0.27.1
CVE-2024-39315
6.5
0%
Jul 2
Pomerium exposed OAuth2 access and ID tokens in user info endpoint response
Affected: < 0.26.1
CVE-2021-29652
6.1
1%
Apr 2
Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process
Affected: 0.10.0 through 0.13.3
CVE-2021-29651
6.1
1%
Apr 2
Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2)
Affected: before 0.13.4
Showing 11