ory hydra

• CVE-2026-33504 High 7.2 Ory Hydra has a SQL injection via forged pagination tokens 0.4%
• CVE-2020-5300 Medium 5.8 Disallow replay of `private_key_jwt` by blacklisting JTIs in Hydra 1.0%