Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 11:29:07 +0000 cnvd-2021-25957 https://cve.radiocsirt.org/vuln/cnvd-2021-25957 cnvd-2021-25957 https://cve.radiocsirt.org/vuln/cnvd-2021-25957 EUVD-2026-26545 https://cve.radiocsirt.org/vuln/euvd-2026-26545 EUVD-2026-26545 https://cve.radiocsirt.org/vuln/euvd-2026-26545 fkie_cve-2021-29652 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29652 <p>Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process</p> <p>Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-29652 GHSA-fv82-r8qv-ch4v — pomerium_signature is not verified in middleware in github.com/pomerium/pomerium https://cve.radiocsirt.org/vuln/ghsa-fv82-r8qv-ch4v <p><strong>Affected:</strong> Go: github.com/pomerium/pomerium</p> <p>### Impact Some API endpoints under /.pomerium/ do not verify parameters with pomerium_signature. This could allow modifying parameters intended to be trusted to Pomerium.</p> <p>The issue mainly affects routes responsible for sign in/out, but does not introduce an authentication bypass.</p> <p>### Specific Go Packages Affected github.com/pomerium/pomerium/authenticate</p> <p>### Patches Patched in v0.13.4</p> <p>### For more information If you have any questions or comments about this advisory * Open an issue in [pomerium](http://github.com/pomerium/pomerium) * Email us at [security@pomerium.com](mailto:security@pomerium.com)</p> <p><strong>Affected:</strong> Go: github.com/pomerium/pomerium</p> <p>### Impact Some API endpoints under /.pomerium/ do not verify parameters with pomerium_signature. This could allow modifying parameters intended to be trusted to Pomerium.</p> <p>The issue mainly affects routes responsible for sign in/out, but does not introduce an authentication bypass.</p> <p>### Specific Go Packages Affected github.com/pomerium/pomerium/authenticate</p> <p>### Patches Patched in v0.13.4</p> <p>### For more information If you have any questions or comments about this advisory * Open an issue in [pomerium](http://github.com/pomerium/pomerium) * Email us at [security@pomerium.com](mailto:security@pomerium.com)</p> https://cve.radiocsirt.org/vuln/ghsa-fv82-r8qv-ch4v gsd-2021-29652 https://cve.radiocsirt.org/vuln/gsd-2021-29652 gsd-2021-29652 https://cve.radiocsirt.org/vuln/gsd-2021-29652