CVE-2026-33506
Mar 26, 2026
Ory Polis, formerly known as BoxyHQ Jackson, bridges or proxies a SAML login flow to OAuth 2.0 or OpenID Connect. Versions prior to 26.2.0 contain a DOM-based Cross-Site Scripting (XSS) vulnerability ...
Read Advisory
Ory Polis Vulnerabilities
1 advisories affecting Ory Polis
1
Total CVEs
0
Critical
1
High