—
GO-2022-0920
Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper
Quick fix
GO-2022-0920 — github.com/ory/oathkeeper: upgrade to the fixed version with the command below.
go get github.com/ory/oathkeeper@v0.38.12-beta.1Details
Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/ory/oathkeeper
Introduced in:
0.38.0-beta.2Fixed in: 0.38.12-beta.1Fix
go get github.com/ory/oathkeeper@v0.38.12-beta.1References
- https://github.com/advisories/GHSA-vfvf-6gx5-mqv6[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2021-32701[ADVISORY]
- https://github.com/ory/oathkeeper/commit/1f9f625c1a49e134ae2299ee95b8cf158feec932[FIX]
- https://github.com/ory/oathkeeper/pull/424[FIX]
- https://github.com/ory/oathkeeper/security/advisories/GHSA-qvp4-rpmr-xwrr[WEB]