EUVD-2025-206237

Spinnaker vulnerable to SSRF due to improper restrictions on http from user input...

Session Fixation

Overview Affected versions of this package are vulnerable to Session Fixation when database session storage is enabled - which it is not by default. A user whose session has been deleted via web interface or API can continue to access the session. User sessions that are automatically deleted due ...

Session Fixation

Overview Affected versions of this package are vulnerable to Session Fixation when database session storage is enabled - which it is not by default. A user whose session has been deleted via web interface or API can continue to access the session. User sessions that are automatically deleted due ...

PT-2025-12554

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2024.12.4 authentik versions prior to 2025.2.3 Description The issue arises when authentik is configured to use the database for session storage, a non-default setting. In this configuration, deleting sessions via t...