Skip to content

OAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email Claims

Moderate severity GitHub Reviewed Published Apr 14, 2026 in oauth2-proxy/oauth2-proxy • Updated Apr 27, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts