pomerium
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 1
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 09/20/2026, pomerium recorded 1 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, pomerium had the most security vulnerabilities in the pomerium ecosystem, with 1 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-50285Pomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback | Exploitation statusPublic exploit | FixYes | Affected productpomerium | Published09/17/2026 | SeverityHigh |
CVE-2024-47616Pomerium's service account access token may grant unintended access to databroker API | Exploitation statusNot known exploited | FixYes | Affected productpomerium | Published10/02/2024 | SeverityMedium |
CVE-2024-39315Pomerium exposed OAuth2 access and ID tokens in user info endpoint response | Exploitation statusNot known exploited | FixYes | Affected productpomerium | Published07/02/2024 | SeverityMedium |
CVE-2023-33189Incorrect Authorization with specially crafted requests | Exploitation statusNot known exploited | FixYes | Affected productpomerium | Published05/30/2023 | SeverityCritical |
CVE-2022-24797Exposure of Sensitive Information in Pomerium | Exploitation statusNot known exploited | FixYes | Affected productpomerium | Published03/31/2022 | SeverityMedium |
CVE-2021-41230OIDC claims not updated from Identity Provider in Pomerium | Exploitation statusNot confirmed | FixYes | Affected productpomerium | Published11/05/2021 | SeverityMedium |
CVE-2021-39206Incorrect Authorization with specially crafted requests | Exploitation statusNot confirmed | FixNot confirmed | Affected productpomerium | Published09/09/2021 | SeverityHigh |
CVE-2021-39204Excessive CPU usage in Pomerium | Exploitation statusNot confirmed | FixNot confirmed | Affected productpomerium | Published09/09/2021 | SeverityHigh |
CVE-2021-39162Incorrect handling of H2 GOAWAY + SETTINGS frames | Exploitation statusNot confirmed | FixNot confirmed | Affected productpomerium | Published09/09/2021 | SeverityHigh |
CVE-2021-29652 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/02/2021 | SeverityUnknown |
CVE-2021-29651 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/02/2021 | SeverityUnknown |
