VendorsOryhydraany version
Vulnerabilities

Ory Hydra any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2026-33504
Ory Hydra has a SQL injection via forged pagination tokens
Published 2026-03-26 · Analyzed
7.2EPSS 0.004
CVE-2020-5300
Disallow replay of `private_key_jwt` by blacklisting JTIs in Hydra
Published 2020-04-06 · Modified
5.8EPSS 0.010