dexidp
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| dex | 3 | – | Jan 25, 2024 |
Exploited and recent CVEs
- CVE-2024-23656 Dex 2.37.0 is discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers 0.4%
- CVE-2022-39222 OAuth authorization code exposure in Dex 1.6%
- CVE-2020-26290 Critical security issues in XML encoding in Dex 1.0%