Vulnerabilities

TI-2026-25900 CVE-2026-33504 · GHSA-r9w3-57w2-gch2

Ory Hydra has a SQL injection via forged pagination tokens

LOW 34

Ory Hydra is an OAuth 2.0 Server and OpenID Connect Provider.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00364 Published 2026-03-26 Fixed in 26.2.0, 2.3.1-0.20260320110106-0b84568fffcc CWE-89

TI-2020-04356 CVE-2020-5300 · GHSA-3p3g-vpw6-4w66

Disallow replay of `private_key_jwt` by blacklisting JTIs in Hydra

LOW 28

In Hydra (an OAuth2 Server and OpenID Certified™ OpenID Connect Provider written in Go), before version 1.4.0+oryOS.17, when using client authentication method 'private_key_jwt' [1], OpenId specification says the followi…

CVSS 3.1MEDIUM 5.8 Network Low privileges User interaction EPSS 0.01028 Published 2020-04-06 Fixed in 1.4.0+oryOS.17, 1.4.0 CWE-294

TI-2019-06030 CVE-2019-8400 · GHSA-7v6r-w4r6-mhch

ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.

LOW 30

ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01328 Published 2019-02-17 Fixed in 1.4.8 CWE-79

Vulnerabilities

Filters

Ory Hydra has a SQL injection via forged pagination tokens

Disallow replay of `private_key_jwt` by blacklisting JTIs in Hydra

ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.