Affected by GO-2022-0933 and 3 other vulnerabilities

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

pkg/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/pomerium/pomerium

Links

Open Source Insights

Directories ¶

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL

Path	Synopsis
cryptutil Package cryptutil provides cryptographic utility functions, complementing the lower level abstractions found in the standard library.	Package cryptutil provides cryptographic utility functions, complementing the lower level abstractions found in the standard library.
grpc Package grpc provides gRPC utility functions, complementing the more common ones in the github.com/grpc/grpc-go package	Package grpc provides gRPC utility functions, complementing the more common ones in the github.com/grpc/grpc-go package
audit
config Package config contains protobuf definitions for config.	Package config contains protobuf definitions for config.
crypt Package crypt contains cryptographic protobuf messages.	Package crypt contains cryptographic protobuf messages.
databroker Package databroker contains databroker protobuf definitions.	Package databroker contains databroker protobuf definitions.
directory Package directory contains protobuf types for directory users.	Package directory contains protobuf types for directory users.
events
registry
session Package session contains protobuf types for sessions.	Package session contains protobuf types for sessions.
user Package user contains protobuf types for users.	Package user contains protobuf types for users.
grpcutil Package grpcutil contains functions for interacting with gRPC.	Package grpcutil contains functions for interacting with gRPC.
logutil Package logutil contains functionality for working with logs.	Package logutil contains functionality for working with logs.
metrics Package metrics declares metrics names and labels that pomerium exposes as constants that could be referred to from other projects	Package metrics declares metrics names and labels that pomerium exposes as constants that could be referred to from other projects
protoutil Package protoutil contains functions for working with protobuf types.	Package protoutil contains functions for working with protobuf types.
storage Package storage provide generic interface to interact with storage backend.	Package storage provide generic interface to interact with storage backend.
inmemory Package inmemory contains an in-memory implementation of the databroker backend.	Package inmemory contains an in-memory implementation of the databroker backend.
redis Package redis implements the storage.Backend interface for redis.	Package redis implements the storage.Backend interface for redis.