—
GO-2026-4801
Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos
Quick fix
GO-2026-4801 — github.com/ory/kratos: upgrade to the fixed version with the command below.
go get github.com/ory/kratos@v1.3.1-0.20260320110106-9d7085948039Details
Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/ory/kratos
Introduced in:
0Fixed in: 1.3.1-0.20260320110106-9d7085948039Fix
go get github.com/ory/kratos@v1.3.1-0.20260320110106-9d7085948039