MEDIUM5.8Go
GHSA-3p3g-vpw6-4w66· CVE-2020-5300, GO-2022-0786Authentication Bypass in hydra
Modified: 7/8/2026
package
Go/github.com/ory/hydra
pkg:go/github.com/ory/hydra
MEDIUM6.1Go
GHSA-7v6r-w4r6-mhch· CVE-2019-8400, GO-2026-4861Hydra has Reflected XSS via error_hint parameter
Modified: 3/26/2026
HIGH7.2Go
GHSA-r9w3-57w2-gch2· CVE-2026-33504, GO-2026-4807Ory Hydra has a SQL injection via forged pagination tokens
Modified: 9/10/2026
—Go
GO-2022-0786· CVE-2020-5300, GHSA-3p3g-vpw6-4w66Authentication Bypass in hydra in github.com/ory/hydra
Modified: 3/3/2026
—Go
GO-2026-4807· CVE-2026-33504, GHSA-r9w3-57w2-gch2Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra
Modified: 3/27/2026
—Go
GO-2026-4861· CVE-2019-8400, GHSA-7v6r-w4r6-mhchHydra has Reflected XSS via error_hint parameter in github.com/ory/hydra
Modified: 3/26/2026