github.com/ory/hydra
View on Github
Activity
- Latest release
- 4y ago
- Total releases
- 66
- Cadence
- ~13 days
- Last 12 months
- 0
Reach
- Stars
- —
Details
- First release
- Aug 09, 2016
| Version | Released | |
|---|---|---|
v1.11.10
patch
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.10
patch
Dependencies (53)
+ 45 more |
|
v1.11.8
patch
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.8
patch
Dependencies (53)
+ 45 more |
|
v1.11.7
patch
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.7
patch
Dependencies (53)
+ 45 more |
|
v1.11.6
patch
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.6
patch
Dependencies (53)
+ 45 more |
|
v1.11.5
patch
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.5
patch
Dependencies (53)
+ 45 more |
|
v1.11.4
patch
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.4
patch
Dependencies (53)
+ 45 more |
|
v1.11.4-pre.2
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.4-pre.2
pre
Dependencies (53)
+ 45 more |
|
v1.11.4-pre.1
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.4-pre.1
pre
Dependencies (53)
+ 45 more |
|
v1.11.4-pre.0
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.4-pre.0
pre
Dependencies (53)
+ 45 more |
|
v1.11.3
patch
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.3
patch
Dependencies (53)
+ 45 more |
|
v1.11.2
patch
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.2
patch
Dependencies (53)
+ 45 more |
|
v1.11.1
minor
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.1
minor
Dependencies (53)
+ 45 more |
|
v1.11.1-pre.8
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.1-pre.8
pre
Dependencies (52)
+ 44 more |
|
v1.11.1-pre.7
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.1-pre.7
pre
Dependencies (52)
+ 44 more |
|
v1.11.1-pre.6
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.1-pre.6
pre
Dependencies (52)
+ 44 more |
|
v1.11.1-pre.5
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.1-pre.5
pre
Dependencies (52)
+ 44 more |
|
v1.11.1-pre.4
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.1-pre.4
pre
Dependencies (52)
+ 44 more |
|
v1.11.1-pre.3
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.1-pre.3
pre
Dependencies (52)
+ 44 more |
|
v1.11.1-pre.2
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.1-pre.2
pre
Dependencies (52)
+ 44 more |
|
v1.11.1-pre.0
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.1-pre.0
pre
Dependencies (52)
+ 44 more |
|
v1.11.0-pre.0
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.11.0-pre.0
pre
Dependencies (52)
+ 44 more |
|
v1.10.6
patch
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.10.6
patch
Dependencies (49)
+ 41 more |
|
v1.10.5
patch
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.10.5
patch
Dependencies (49)
+ 41 more |
|
v1.10.5-pre.1
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.10.5-pre.1
pre
Dependencies (49)
+ 41 more |
|
v1.10.3
patch
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.10.3
patch
Dependencies (50)
+ 42 more |
|
v1.10.1
minor
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.10.1
minor
Dependencies (51)
+ 43 more |
|
v1.9.3-pre.5
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.9.3-pre.5
pre
Dependencies (51)
+ 43 more |
|
v1.9.3-pre.1
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.9.3-pre.1
pre
Dependencies (51)
+ 43 more |
|
v1.9.2
minor
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.9.2
minor
Dependencies (54)
+ 46 more |
|
v1.9.0-rc.0
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.9.0-rc.0
pre
Dependencies (54)
+ 46 more |
|
v1.9.0-alpha.3.pre.3
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.9.0-alpha.3.pre.3
pre
Dependencies (55)
+ 47 more |
|
v1.9.0-alpha.3.pre.0
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.9.0-alpha.3.pre.0
pre
Dependencies (55)
+ 47 more |
|
v1.8.4
patch
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.8.4
patch
Dependencies (51)
+ 43 more |
|
v1.8.1
minor
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.8.1
minor
Dependencies (51)
+ 43 more |
|
v1.7.4
minor
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.7.4
minor
Dependencies (50)
+ 42 more |
|
v1.5.0-beta.2
pre
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.5.0-beta.2
pre
Dependencies (52)
+ 44 more |
|
v1.4.7
minor
2 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev |
v1.4.7
minor
Dependencies (50)
+ 42 more |
|
v1.1.0
minor
3 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev
CVE-2020-5300
GO-2022-0786
GHSA-3p3g-vpw6-4w66
Aug 21, 2024
Authentication Bypass in hydra in github.com/ory/hydra Authentication Bypass in hydra in github.com/ory/hydra Fixed in
1.4.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.1.0
minor
Dependencies (48)
+ 40 more |
|
v1.0.7
patch
3 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev
CVE-2020-5300
GO-2022-0786
GHSA-3p3g-vpw6-4w66
Aug 21, 2024
Authentication Bypass in hydra in github.com/ory/hydra Authentication Bypass in hydra in github.com/ory/hydra Fixed in
1.4.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.0.7
patch
Dependencies (48)
+ 40 more |
|
v1.0.1
major
3 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev
CVE-2020-5300
GO-2022-0786
GHSA-3p3g-vpw6-4w66
Aug 21, 2024
Authentication Bypass in hydra in github.com/ory/hydra Authentication Bypass in hydra in github.com/ory/hydra Fixed in
1.4.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.0.1
major
Dependencies (47)
+ 39 more |
|
v1.0.0-rc.14
pre
3 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev
CVE-2020-5300
GO-2022-0786
GHSA-3p3g-vpw6-4w66
Aug 21, 2024
Authentication Bypass in hydra in github.com/ory/hydra Authentication Bypass in hydra in github.com/ory/hydra Fixed in
1.4.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.0.0-rc.14
pre
Dependencies (47)
+ 39 more |
|
v1.0.0-rc.11
pre
3 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev
CVE-2020-5300
GO-2022-0786
GHSA-3p3g-vpw6-4w66
Aug 21, 2024
Authentication Bypass in hydra in github.com/ory/hydra Authentication Bypass in hydra in github.com/ory/hydra Fixed in
1.4.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.0.0-rc.11
pre
Dependencies (47)
+ 39 more |
|
v1.0.0-beta.6
pre
3 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev
CVE-2020-5300
GO-2022-0786
GHSA-3p3g-vpw6-4w66
Aug 21, 2024
Authentication Bypass in hydra in github.com/ory/hydra Authentication Bypass in hydra in github.com/ory/hydra Fixed in
1.4.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.0.0-beta.6
pre
|
|
v1.0.0-beta.5
pre
3 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev
CVE-2020-5300
GO-2022-0786
GHSA-3p3g-vpw6-4w66
Aug 21, 2024
Authentication Bypass in hydra in github.com/ory/hydra Authentication Bypass in hydra in github.com/ory/hydra Fixed in
1.4.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.0.0-beta.5
pre
|
|
v1.0.0-beta.4
pre
3 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev
CVE-2020-5300
GO-2022-0786
GHSA-3p3g-vpw6-4w66
Aug 21, 2024
Authentication Bypass in hydra in github.com/ory/hydra Authentication Bypass in hydra in github.com/ory/hydra Fixed in
1.4.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.0.0-beta.4
pre
|
|
v0.11.7
patch
3 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev
CVE-2020-5300
GO-2022-0786
GHSA-3p3g-vpw6-4w66
Aug 21, 2024
Authentication Bypass in hydra in github.com/ory/hydra Authentication Bypass in hydra in github.com/ory/hydra Fixed in
1.4.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.11.7
patch
|
|
v0.11.1
minor
3 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev
CVE-2020-5300
GO-2022-0786
GHSA-3p3g-vpw6-4w66
Aug 21, 2024
Authentication Bypass in hydra in github.com/ory/hydra Authentication Bypass in hydra in github.com/ory/hydra Fixed in
1.4.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.11.1
minor
|
|
v0.10.6
minor
3 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev
CVE-2020-5300
GO-2022-0786
GHSA-3p3g-vpw6-4w66
Aug 21, 2024
Authentication Bypass in hydra in github.com/ory/hydra Authentication Bypass in hydra in github.com/ory/hydra Fixed in
1.4.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.10.6
minor
|
|
v0.10.0-alpha.18
pre
3 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev
CVE-2020-5300
GO-2022-0786
GHSA-3p3g-vpw6-4w66
Aug 21, 2024
Authentication Bypass in hydra in github.com/ory/hydra Authentication Bypass in hydra in github.com/ory/hydra Fixed in
1.4.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.10.0-alpha.18
pre
|
|
v0.10.0-alpha.16
pre
3 CVEs
CVE-2019-8400
GO-2026-4861
GHSA-7v6r-w4r6-mhch
Mar 26, 2026
Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/ory/hydra before v1.4.8. References
Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-33504
GO-2026-4807
GHSA-r9w3-57w2-gch2
Mar 23, 2026
Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra Updated Mar 27, 2026 · Source: OSV.dev
CVE-2020-5300
GO-2022-0786
GHSA-3p3g-vpw6-4w66
Aug 21, 2024
Authentication Bypass in hydra in github.com/ory/hydra Authentication Bypass in hydra in github.com/ory/hydra Fixed in
1.4.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.10.0-alpha.16
pre
|