Go/github.com/dexidp/dex: high 8.7
Dex: Token-exchange endpoint is missing AllowedConnectors enforcement
Action: Upgrade github.com/dexidp/dex to 0.0.0-20260303131938-204dbb2e3ff7 or later.
go get github.com/dexidp/dex@v0.0.0-20260303131938-204dbb2e3ff7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260303131938-204dbb2e3ff7 |
Sources
- osv: GHSA-7qjx-gp9h-65qj
- https://github.com/dexidp/dex/security/advisories/GHSA-7qjx-gp9h-65qj
- https://github.com/dexidp/dex/commit/204dbb2e3ff7692af3b7ca4362b1ee46fb43c227
- https://github.com/dexidp/dex
published · modified · JSON