ory — Vulnerabilities & Security Advisories 14

Ory provides open-source identity and access management solutions, including authentication, authorization, and user management services. Historically, the project has faced vulnerabilities across multiple classes, including remote code execution, cross-site scripting, privilege escalation, and insecure direct object references. Notable security characteristics include its cloud-native architecture and OAuth 2.0/OpenID Connect implementations. While no major public security incidents have been widely reported, the project maintains a moderate CVE count with 14 recorded vulnerabilities to date, primarily related to input validation and access control issues in its core authentication flows.