Data

Tools

Indexes

Applications

Experiments

Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 1.8% on proxy.golang.org
Top 2.5% dependent packages on proxy.golang.org
Top 2.3% dependent repos on proxy.golang.org
Top 1.7% forks on proxy.golang.org
Top 1.2% docker downloads on proxy.golang.org

proxy.golang.org : github.com/pomerium/pomerium

Package pomerium is the root of the pomerium project.

Registry - Source - Documentation - JSON
purl: pkg:golang/github.com/pomerium/pomerium
Keywords: beyondcorp , gateway , go , iam , identity , identity-aware-proxy , pomerium , reverse-proxy , vpn , zero-trust
License: Apache-2.0
Latest release: 20 days ago
First release: over 6 years ago
Namespace: github.com/pomerium
Dependent packages: 5
Dependent repositories: 5
Stars: 4,428 on GitHub
Forks: 310 on GitHub
Docker dependents: 2
Docker downloads: 530
Total Commits: 3466
Committers: 102
Average commits per author: 33.98
Development Distribution Score (DDS): 0.714
More commit stats: commits.ecosyste.ms
See more repository details: repos.ecosyste.ms
Last synced: 1 day ago

High
GSA_kwCzR0hTQS1yN3JoLWp3dzUtNWZqcs4AA_7j
Pomerium service account access token may grant unintended access to databroker API
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: 11 months ago
Critical
GSA_kwCzR0hTQS1wdnJjLXd2ajItZjU5cM4AAzfl
Pomerium vulnerable to Incorrect Authorization with specially crafted requests
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: over 2 years ago
High
GSA_kwCzR0hTQS01d2pmLTYyaHctcTc4cs0VsQ
Excessive CPU usage
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: almost 4 years ago
High
GSA_kwCzR0hTQS1namNnLXZyeGcteG1nds0VsA
Incorrect handling of H2 GOAWAY + SETTINGS frames
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: almost 4 years ago
Moderate
GSA_kwCzR0hTQS1ycnFyLTd3NTktNjM3ds4AA9mz
Pomerium exposed OAuth2 access and ID tokens in user info endpoint response
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1qMzR2LTM1NTItNXI3as0vhA
Multiple security issues in Pomerium's embedded envoy
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: over 3 years ago
High
GSA_kwCzR0hTQS1jZmMyLXdqY20tYzhmbc0Vsg
Incorrect Authorization with specially crafted requests
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: almost 4 years ago
Moderate
GSA_kwCzR0hTQS1xOThmLTJ4NHAtcHJqcs4AA_Wl
Exposure of debug and metrics endpoints in Pomerium
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1qNndwLTM4NTktdnhmZ80W9g
OIDC claims not updated from Identity Provider in Pomerium
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: almost 4 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM1dmMtdzkzdy03NWMy
JWT leak via Open Redirect in Programmatic access
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: over 4 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZ2ODItcjhxdi1jaDR2
pomerium_signature is not verified in middleware in github.com/pomerium/pomerium
Ecosystems: go
Packages: github.com/pomerium/pomerium
Source: github
Published: over 4 years ago