Populaires : Données mises à jour le 27 octobre 2026

Catégories

Internet1 356
Communication321
Audio et vidéo898
Graphisme et design539
Bureautique et productivité1 124
Outils de développement3 134
Outils d’IA529
Sécurité et vie privée385
Outils système3 114
Jeux523
Éducation et sciences239
Réseau et informatique284

openapi-oathkeeper : anciennes versions à télécharger

Generate Ory Oathkeeper access rules from an OpenAPI 3 contract.

Cette page répertorie 4 versions d’openapi-oathkeeper, du 19 mars 2026 à l’actuelle 0.8.0. Chacune renvoie aux fichiers d’installation de l’éditeur.

2026: 4 4 26
VersionDateTailleFichiers
0.8.0Dernière version 9 septembre 2026 — 64 bits ZIP32 bits ZIP
Notes de version
## What's Changed

• Add integration tests by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/143
• feat:update dependencies and image version by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/144
• Capture array and object path params as explicit types by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/145

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.19...v0.8.0
0.7.19 7 septembre 2026 — 64 bits ZIP32 bits ZIP
Notes de version
## Security fix

**High severity:** Overbroad path-parameter regex in generated Ory Oathkeeper access rules could cause an authentication/authorization bypass.

Previously, every OpenAPI `string` path parameter (and any parameter type the generator couldn't classify) was compiled to the unanchored regex token `<.+>`. Because `.` matches `/` in Go's regexp engine — and in Ory Oathkeeper's `regexp` matching strategy — a rule generated for a single path segment (e.g. `/public/{slug}`) also matched deeper, unrelated paths under the same prefix (e.g. `/public/admin/delete-all-users`). If those deeper paths weren't defined as their own, more specific OpenAPI operations, the broader (often unauthenticated `noop`) rule would match and proxy them instead of being rejected.

Generated rules for `string` and unclassified path parameters now use `<[^/]+>`, anchored to a single URL segment, matching the behavior already documented for numeric parameters.

**Action required:** Regenerate your Ory Oathkeeper access rules with this version and redeploy them. Rules generated by earlier versions using `string` path parameters may be broader than intended.

See [GHSA-9f3w-vm54-7gfc](https://github.com/cerberauth/openapi-oathkeeper/security/advisories/GHSA-9f3w-vm54-7gfc) for full details. Thanks to @EQSTLab for the responsible disclosure.

## What's Changed

• fix(generator):anchor string path-parameter regex to a single URL segment by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/142

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.18...v0.7.19
0.7.18 13 août 2026 — 64 bits ZIP32 bits ZIP
0.7.15 19 mars 2026 — 64 bits ZIP32 bits ZIP

Le plus populaire dans Langages et SDK

Tout voir
  1. LLVMLangages et SDK · LLVM
  2. DenoLangages et SDK · Deno Land Inc.
  3. CMakeLangages et SDK · Kitware
  4. YarnLangages et SDK · Yarn Contributors
  5. CcacheLangages et SDK · Joel Rosdahl
  6. sbtLangages et SDK · Lightbend, Inc.
  7. BOINCLangages et SDK · Space Sciences Laboratory, U.C. Berkeley
  8. Dart SDKLangages et SDK · Google
  9. NVM for WindowsLangages et SDK · Ecor Ventures LLC

Autres logiciels de CerberAuth

Tout voir
  • jwtopLangages et SDK · CerberAuth

Partager