—
GO-2022-0406
Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper
Quick fix
GO-2022-0406 — github.com/ory/oathkeeper: upgrade to the fixed version with the command below.
go get github.com/ory/oathkeeper@v0.38.12-beta.1Details
Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/ory/oathkeeper
Introduced in:
0.38.0-beta.2Fixed in: 0.38.12-beta.1Fix
go get github.com/ory/oathkeeper@v0.38.12-beta.1