Do Son A critical 9.1 CVSS flaw in OAuth2 Proxy allows unauthenticated users to bypass security via User-Agent spoofing. Secure your upstream apps—patch v7.15.2 today.
OAuth2-Proxy
A critical vulnerability (CVE-2025-54576, CVSS 9.1) in OAuth2-Proxy allows attackers to bypass authentication by manipulating query parameters that match skip_auth_routes regex patterns.