Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ory/hydra
master @ 7997dc1
119
Fixes
13
CVEs
CRITICAL
Peak severity
41.0%
Coverage
Highlights
Auth Bypass: 46 prior fixes. Scrutinize any change in this area.
oauth2: most-fixed (24 issues). Treat as high-risk during review.
46 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Subtle regressions in token lifetime handling, deactivation, and reuse checks allow attackers to bypass critical OAuth2 rotation constraints. Inadequate SQL grouping and transaction isolation levels under concurrency have previously exposed multi-tenant environments and refresh token flows to severe security bypasses.
SSRF: ORY Hydra routinely initiates outgoing requests for client metadata and back-channel logouts. Failing to strictly validate and restrict metadata URI targets to non-private IP ranges can allow malicious clients to perform SSRF attacks against administrative or internal network targets.
Denial of Service: Unhandleable database growth, unpaginated select queries, unindexed token tables, and unbounded network responses from external OIDC endpoints have repeatedly caused database performance degradation, connection blocking, or memory-exhaustion panics.