Pomerium

v0.32.8 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Network Security

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

aigateway beyondcorp gateway go iam identity

+5 more

identity-aware-proxy pomerium proxy vpn zero-trust

Affected surfaces

auth

ReleasePort's take

Moderate signal

editorial:auto 1mo

Release v0.32.8 of Pomerium fixes the security vulnerability GHSA-ggw3-5987-rx77 affecting authentication handling.

Why it matters: The fix addresses a critical (severity 90) flaw in authentication; deploy v0.32.8 immediately to protect user sessions.

Summary

AI summary

Security advisory GHSA-ggw3-5987-rx77 fixed.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Fixes security vulnerability GHSA-ggw3-5987-rx77 Fixes security vulnerability GHSA-ggw3-5987-rx77 Source: llm_adapter@2026-06-04 Confidence: high	—

Full changelog

What's Changed

Changed

fix for https://github.com/pomerium/pomerium/security/advisories/GHSA-ggw3-5987-rx77
backport 6405 to 0.32 by @calebdoxsey in https://github.com/pomerium/pomerium/pull/6422

Full Changelog: https://github.com/pomerium/pomerium/compare/v0.32.7...v0.32.8

Security Fixes

dep: GHSA-ggw3-5987-rx77 — security advisory fixed

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Pomerium

Get notified when new releases ship.

About Pomerium

Pomerium is an identity and context-aware access proxy.

All releases →