https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T04:55:58.844356+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-25957 cnvd-2021-25957 2026-10-10T04:55:58.847593+00:00 cnvd-2021-25957 https://cve.radiocsirt.org/vuln/euvd-2026-26545 EUVD-2026-26545 2026-10-10T04:55:58.847627+00:00 EUVD-2026-26545 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29652 fkie_cve-2021-29652 2026-10-10T04:55:58.847641+00:00

Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process

 https://cve.radiocsirt.org/vuln/ghsa-fv82-r8qv-ch4v GHSA-fv82-r8qv-ch4v — pomerium_signature is not verified in middleware in github.com/pomerium/pomerium 2026-10-10T04:55:58.847668+00:00

Affected: Go: github.com/pomerium/pomerium

### Impact Some API endpoints under /.pomerium/ do not verify parameters with pomerium_signature. This could allow modifying parameters intended to be trusted to Pomerium.

The issue mainly affects routes responsible for sign in/out, but does not introduce an authentication bypass.

### Specific Go Packages Affected github.com/pomerium/pomerium/authenticate

### Patches Patched in v0.13.4

### For more information If you have any questions or comments about this advisory * Open an issue in [pomerium](http://github.com/pomerium/pomerium) * Email us at [security@pomerium.com](mailto:security@pomerium.com)

 https://cve.radiocsirt.org/vuln/gsd-2021-29652 gsd-2021-29652 2026-10-10T04:55:58.847698+00:00 gsd-2021-29652