Dex (Linuxfoundation) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 79 known versions, newest CVE from 2024-01-25. Vendor: Linuxfoundation.

CVEs of Dex

• CVE-2024-23656 - CVSS 7.5 (high), 2024-01-25: Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex 2.37.0 serves HTTPS with insecure TLS 1.0 and TLS 1.1.…
• CVE-2022-39222 - CVSS 9.3 (critical), 2022-10-06: Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex instances with public clients (and by extension, clients…
• CVE-2020-27847 - CVSS 9.8 (critical), 2021-05-28: A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to…
• CVE-2020-26290 - CVSS 9.6 (critical), 2020-12-28: Dex is a federated OpenID Connect provider written in Go. In Dex before version 2.27.0 there is a critical set of vulnerabilities which impacts users…