Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 1.8% on proxy.golang.org
Top 2.5% dependent packages on proxy.golang.org
Top 2.3% dependent repos on proxy.golang.org
Top 1.7% forks on proxy.golang.org
Top 1.2% docker downloads on proxy.golang.org

proxy.golang.org : github.com/pomerium/pomerium

Package pomerium is the root of the pomerium project.

Registry - Source - Documentation - JSON
purl: pkg:golang/github.com/pomerium/pomerium
Keywords: beyondcorp, gateway, go, iam, identity, identity-aware-proxy, pomerium, reverse-proxy, vpn, zero-trust
License: Apache-2.0
Latest release: 4 months ago
First release: over 5 years ago
Namespace: github.com/pomerium
Dependent packages: 5
Dependent repositories: 5
Stars: 3,454 on GitHub
Forks: 275 on GitHub
Docker dependents: 2
Docker downloads: 530
See more repository details: repos.ecosyste.ms
Last synced: about 22 hours ago

Moderate

GSA_kwCzR0hTQS1qMzR2LTM1NTItNXI3as0vhA

Multiple security issues in Pomerium's embedded envoy
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: about 2 years ago

High

GSA_kwCzR0hTQS01d2pmLTYyaHctcTc4cs0VsQ

Excessive CPU usage
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: over 2 years ago

High

GSA_kwCzR0hTQS1namNnLXZyeGcteG1nds0VsA

Incorrect handling of H2 GOAWAY + SETTINGS frames
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: over 2 years ago

Critical

GSA_kwCzR0hTQS1wdnJjLXd2ajItZjU5cM4AAzfl

Pomerium vulnerable to Incorrect Authorization with specially crafted requests
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: 12 months ago

Moderate

GSA_kwCzR0hTQS1qNndwLTM4NTktdnhmZ80W9g

OIDC claims not updated from Identity Provider in Pomerium
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: over 2 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZ2ODItcjhxdi1jaDR2

pomerium_signature is not verified in middleware in github.com/pomerium/pomerium
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: almost 3 years ago

High

GSA_kwCzR0hTQS1jZmMyLXdqY20tYzhmbc0Vsg

Incorrect Authorization with specially crafted requests
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: over 2 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM1dmMtdzkzdy03NWMy

JWT leak via Open Redirect in Programmatic access
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: almost 3 years ago