VendorsOryhydraall versions
Vulnerabilities

Ory Hydra

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-33504
Ory Hydra has a SQL injection via forged pagination tokens
Published 2026-03-26 · Analyzed
7.2EPSS 0.004
CVE-2019-8400
ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.
Published 2019-02-17 · Modified
6.1EPSS 0.013
CVE-2020-5300
Disallow replay of `private_key_jwt` by blacklisting JTIs in Hydra
Published 2020-04-06 · Modified
5.8EPSS 0.010