PO
Vendor
pomerium
11
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-50285 | PO pomerium pomerium | 7.5 | Sep 17 | Pomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback |
| CVE-2024-47616 | PO pomerium pomerium | 6.8 | Oct 2 | Pomerium's service account access token may grant unintended access to databroker API |
| CVE-2024-39315 | PO pomerium pomerium | 6.5 | Jul 2 | Pomerium exposed OAuth2 access and ID tokens in user info endpoint response |
| CVE-2023-33189 | PO pomerium pomerium | 9.8 | May 30 | Incorrect Authorization with specially crafted requests |
| CVE-2022-24797 | PO pomerium pomerium | 9.1 | Mar 31 | Exposure of Sensitive Information in Pomerium |
| CVE-2021-41230 | PO pomerium pomerium | 8.8 | Nov 5 | OIDC claims not updated from Identity Provider in Pomerium |
| CVE-2021-39206 | PO pomerium pomerium | 8.6 | Sep 9 | Incorrect Authorization with specially crafted requests |
| CVE-2021-39204 | PO pomerium pomerium | 7.5 | Sep 9 | Excessive CPU usage in Pomerium |
| CVE-2021-39162 | PO pomerium pomerium | 8.6 | Sep 9 | Incorrect handling of H2 GOAWAY + SETTINGS frames |
| CVE-2021-29652 | PO Pomerium Pomerium | 6.1 | Apr 2 | Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process |
| CVE-2021-29651 | PO Pomerium Pomerium | 6.1 | Apr 2 | Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2) |