Is github.com/dexidp/dex safe to use?

github.com/dexidp/dex has 5 known vulnerabilities on the latest version (v0.6.1). DepScope rates its health at 40/100 (high risk).

What is the latest version of github.com/dexidp/dex?

The latest version of github.com/dexidp/dex is v0.6.1, released 2016-09-29.

Does github.com/dexidp/dex have known vulnerabilities?

Yes. github.com/dexidp/dex has 5 known vulnerabilities. See depscope.dev/pkg/go/github.com/dexidp/dex for details.

Is github.com/dexidp/dex deprecated?

No, github.com/dexidp/dex is actively maintained. Latest release: v0.6.1 (2016-09-29).

What are alternatives to github.com/dexidp/dex?

DepScope has no curated alternatives for github.com/dexidp/dex at this time.

What license does github.com/dexidp/dex use?

github.com/dexidp/dex is licensed under Apache-2.0.

github.com/dexidp/dex

govv0.6.1

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

License Apache-2.0permissive45 versions300 maintainers0 deps10,785 weekly dl

dexidp/dex

/ 100

Health

do not use

github.com/dexidp/dex has critical vulnerabilities — do not use

Update to >= 2.35.0 to fix known vulnerabilities

Moderate health score (40/100) — verify manually
1 high severity vulnerabilities
3 critical vulnerabilities

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

0/25

security

12/15

maturity

13/15

community

Vulnerabilities

3 critical1 high1 low

Advisories (5)

Severity	ID	Summary	Fixed in
critical	CVE-2020-27847	Authentication Bypass in dex	2.27.0
high	CVE-2024-23656	Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers	0.0.0-20240125115555-5bbdb4420254
critical	CVE-2020-26290	Critical security issues in XML encoding in github.com/dexidp/dex	1.1.0
critical	CVE-2022-39222	Dex vulnerable to Man-in-the-Middle allowing ID token capture via intercepted authorization code	2.35.0
unknown	CVE-2024-23656	Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers in github.com/dexidp/dex	—

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/dexidp/dex

Last updated · 2016-09-29T22:48:30Z