tocsin

Go/github.com/ory/oathkeeper: unknown

Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

Action: Upgrade github.com/ory/oathkeeper to 0.38.12-beta.1 or later.

go get github.com/ory/oathkeeper@v0.38.12-beta.1

Affected

introducedfixedlast affected
0.38.0-beta.20.38.12-beta.1-

Fixed versions

0.38.12-beta.1

Sources

published · modified · JSON