ory

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

ory records in CISA KEV

No ory vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Fosite 4 records LOW Oathkeeper 4 records MEDIUM Hydra 3 records LOW Keto 1 record LOW Kratos 1 record LOW Polis 1 record LOW

Records

1 record in Keto · all components

TI-2026-25901 CVE-2026-33505 · GHSA-c38g-mx2c-9wf2

Ory Keto has a SQL injection via forged pagination tokens

LOW 33

Ory Keto is am open source authorization server for managing permissions at scale.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00233 Published 2026-03-26 Fixed in 26.2.0, 0.14.1-0.20260320140104-e4393662cd2e CWE-89

Open these records in search →

Critical	1
High	8
Medium	6
Low	0
No CVSS	0