oauth2-proxy

v7.15.3 Security

This release includes 11 security fixes for security teams reviewing exposed deployments.

Published 3d Reverse Proxies & Load Balancers

✓ No known CVEs patched

This release patches 11 known CVEs

Topics

cloud-infrastructure oauth2-proxy tls sso

Affected surfaces

deps

ReleasePort's take

Moderate signal

editorial:auto 3d

Upgrade the Golang runtime to version 1.26.4 and patch multiple critical CVEs listed in the release.

Why it matters: CVE severity is high (severity 95) for ten vulnerabilities; upgrade to Go 1.26.4 resolves them, protecting application security.

AI summary

Updates Release Highlights, Changes since v7.15.2, and https://nvd.nist.gov/vuln/detail/CVE-2026-33811 across a mixed release.

Type	Severity	Summary	CVE
Security	Critical	Address vulnerabilities CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39836, CVE-2026-42499, CVE-2026-42504, CVE-2026-39823, CVE-2026-39826, CVE-2026-39825, CVE-2026-27145, CVE-2026-42507 Address vulnerabilities CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39836, CVE-2026-42499, CVE-2026-42504, CVE-2026-39823, CVE-2026-39826, CVE-2026-39825, CVE-2026-27145, CVE-2026-42507 Source: llm_adapter@2026-06-09 Confidence: high	—
Dependency	Critical	Upgrade Golang runtime to version 1.26.4 Upgrade Golang runtime to version 1.26.4 Source: llm_adapter@2026-06-09 Confidence: high	—
Dependency	Medium	Bump Go to version 1.26 and migrate reverse proxy handling Bump Go to version 1.26 and migrate reverse proxy handling Source: llm_adapter@2026-06-09 Confidence: high	—

Full changelog

🔵 Golang version upgrade to v1.26.4
- Upgrade of all dependencies to their latest versions
🕵️‍♀️ Vulnerabilities have ben addressed

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track oauth2-proxy

Get notified when new releases ship.

About oauth2-proxy

A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.