Junglewise Threat Intelligence

CVE-2026-33504: GO-2026-4807 - Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

CVE-2026-33504 · Severity: low · CVSS 3.1 · Published 2026-03-23

Technologies: github.com/ory/hydra (Go). Vendors: Go.

Executive brief

Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

Affected products

  • Go github.com/ory/hydra/v2
  • Go github.com/ory/hydra

Related threats