What’s Vulnerable › Products

ory hydra vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your ory hydra version is affected

Latest ory hydra vulnerabilities

• CVE-2026-33504 — Ory Hydra has a SQL injection via forged pagination tokens (CVSS 7.2)
• CVE-2020-5300 — Disallow replay of `private_key_jwt` by blacklisting JTIs in Hydra (CVSS 5.3)
• CVE-2019-8400 — (CVSS 6.1)