github.com/ory/kratos (Go) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Go package github.com/ory/kratos, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2026-33503 — CVSS 7.2 (high): Ory Kratos is an identity, user management and authentication system for cloud services. Prior to version 26.2.0, the ListCourierMessages…
• CVE-2024-45042 — CVSS 4.4 (medium): Ory Kratos is an identity, user management and authentication system for cloud services. Prior to version 1.3.0, given a number of…