ory oathkeeper

• CVE-2026-33496 High 8.1 Ory Oathkeeper has an authentication bypass by cache key confusion 0.4%
• CVE-2026-33495 Medium 6.5 Ory Oathkeeper has an authentication bypass by usage of untrusted header 0.2%
• CVE-2026-33494 Critical 10.0 Ory Oathkeeper has a path traversal authorization bypass 0.5%
• CVE-2021-32701 High 7.5 Possible bypass of token claim validation when OAuth2 Introspection caching is enabled 1.6%