openshift4/ose-oauth-proxy vulnerabilities
CVEs whose affected-version data names the openshift4/ose-oauth-proxy package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-83589Medium· 6.1A flaw was found in oauth-proxy
A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter (`rd`) during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a speciall…
▾ SunlitRed Hat · openshift4/ose-oauth-proxy-rhel9EPSS 0.28%via NVD
CVE-2026-49332High· 8.5A flaw was found in openshift/oauth-proxy
A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only dash-variant keys (X-Forwarded-User) but does not strip underscore-variant keys (X_Forwarded_User) from incoming requests. WSGI and PHP f…
▾ TwilightRed Hat · openshift4/ose-oauth-proxyEPSS 0.53%via NVD