https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T06:29:22.021840+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-210103 EUVD-2026-210103 2026-10-10T06:29:22.025099+00:00 EUVD-2026-210103 https://cve.radiocsirt.org/vuln/fkie_cve-2023-33189 fkie_cve-2023-33189 2026-10-10T06:29:22.025134+00:00

Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Pomerium. This issue has been patched in versions 0.17.4, 0.18.1, 0.19.2, 0.20.1, 0.21.4 and 0.22.2.

 https://cve.radiocsirt.org/vuln/ghsa-pvrc-wvj2-f59p GHSA-pvrc-wvj2-f59p — Pomerium vulnerable to Incorrect Authorization with specially crafted requests 2026-10-10T06:29:22.025165+00:00

Affected: Go: github.com/pomerium/pomerium

### Impact

With specially crafted requests, incorrect authorization decisions may be made by Pomerium.

### Patches

We are releasing patch fixes to address this vulnerability going back to `v0.17.X`. Please upgrade to:

- v0.22.2 - v0.21.4 - v0.20.1 - v0.19.2 - v0.18.1 - v0.17.4

### For more information

If you have any questions or comments about this advisory:

- Open an issue in [pomerium/pomerium](https://github.com/pomerium/pomerium/issues) - Email us at [security@pomerium.com](mailto:security@pomerium.com)

 https://cve.radiocsirt.org/vuln/gsd-2023-33189 gsd-2023-33189 2026-10-10T06:29:22.025199+00:00 gsd-2023-33189