CVE-2026-50285
1 advisory.
Go/github.com/pomerium/pomerium CVE-2026-50285: high 7.5, EPSS 0.74%
Pomerium Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback
Action: Upgrade github.com/pomerium/pomerium to 0.32.8 or later.
go get github.com/pomerium/pomerium@v0.32.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.32.6 | 0.32.8 | - |
Fixed versions
| 0.32.8 |
Sources
- osv: GHSA-ggw3-5987-rx77
- https://github.com/pomerium/pomerium/security/advisories/GHSA-ggw3-5987-rx77
- https://github.com/pomerium/pomerium/commit/593eb81c7e5bdbe6071a30d330f374967869577f
- https://github.com/pomerium/pomerium
- https://github.com/pomerium/pomerium/releases/tag/v0.32.8
CVE-2026-50285 · published · modified · JSON