641 matches found
CVE-2026-94609
CVE-2026-94609 — authentik Privilege Escalation via Delegated Group/User Management -important Write-up and proof-of-concept for a privilege-escalation vulnerability in goauthentik/authentik, fixed in 2026.2.7 / 2026.5.7 / 2026.8.2 and assigned CVE-2026-94609 GHSA-h6c5-mpvq-j4jc. I was one of the...
CVE-2026-118764 vulnerabilities
Vulnerabilities for packages: gemini-cli, eco-jess, supabase-storage-api-fips, renovate, unleash, unleash-fips, maxscale-fips, actions-runner, pulumi, thingsboard-fips, langfuse-fips, commitizen, thingsboard, ts-patch, foxx-cli, lerna, lambda-nodejs, maxscale, supabase-storage-api, tileserver-gl,...
GHSA-G3HV-75WG-M249 vulnerabilities
Vulnerabilities for packages: gemini-cli, eco-jess, supabase-storage-api-fips, renovate, unleash, unleash-fips, maxscale-fips, actions-runner, pulumi, thingsboard-fips, langfuse-fips, commitizen, thingsboard, ts-patch, foxx-cli, lerna, lambda-nodejs, maxscale, supabase-storage-api, tileserver-gl,...
GHSA-3JP2-3MRG-2VXC vulnerabilities
Vulnerabilities for packages: prometheus-prefect-exporter, kubeflow-pipelines, duplicity, chroma, metaflow-service, datadog-agent-fips, litellm-fips, mcp-atlassian, openstack-keystone-2026.2-fips, openstack-rally-2026.1, kubeflow-pipelines-visualization-server, openstack-keystone-2026.1-fips,...
CVE-2026-49272 vulnerabilities
Vulnerabilities for packages: prometheus-prefect-exporter, kubeflow-pipelines, duplicity, chroma, metaflow-service, datadog-agent-fips, litellm-fips, mcp-atlassian, openstack-keystone-2026.2-fips, openstack-rally-2026.1, kubeflow-pipelines-visualization-server, openstack-keystone-2026.1-fips,...
GHSA-MRHX-C7XC-M3W5 vulnerabilities
Vulnerabilities for packages: authentik-fips, authentik, code-server, rstudio, langfuse-fips, wazuh-dashboard, kibana, vitess, wazuh-dashboard-fips, openspec-fips, opensearch-dashboards, arangodb, opensearch-dashboards-fips, langfuse, openspec, gitlab-rails-ce, dotstatsuite-supercore...
CVE-2023-54404 vulnerabilities
Vulnerabilities for packages: authentik-fips, authentik, code-server, rstudio, langfuse-fips, wazuh-dashboard, kibana, vitess, wazuh-dashboard-fips, openspec-fips, opensearch-dashboards, arangodb, opensearch-dashboards-fips, langfuse, openspec, gitlab-rails-ce, dotstatsuite-supercore...
authentik
What is authentik? authentik is an open-source Identity Provider IdP for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters. Our enterprise offering is available for organizations to securely replace existing...
CVE-2026-104874 vulnerabilities
Vulnerabilities for packages: authentik-fips, authentik, mlflow-fips, puppygraph-python, nemo-rl-cuda-13.0, wazuh-manager, airflow, crossplane-function-pythonic, litellm, wazuh-manager-fips, py3-cassandra-medusa, request-1276...
GHSA-54P9-H82J-F925 vulnerabilities
Vulnerabilities for packages: authentik-fips, authentik, mlflow-fips, puppygraph-python, nemo-rl-cuda-13.0, wazuh-manager, airflow, crossplane-function-pythonic, litellm, wazuh-manager-fips, py3-cassandra-medusa, request-1276...
CVE-2026-77387 vulnerabilities
Vulnerabilities for packages: authentik-fips, authentik, superset-fips, superset...
GHSA-MHVH-FQ92-PFMR vulnerabilities
Vulnerabilities for packages: authentik-fips, authentik, superset-fips, superset...
GHSA-42VR-XJ54-VC7V vulnerabilities
Vulnerabilities for packages: openstack-manila-2026.1, openstack-placement-2025.1-fips, openstack-nova-2026.1, openstack-barbican-2026.1, nemo-rl-cuda-13.0, localstack, openstack-designate-2026.1, superset-fips, metaflow-service-fips, openstack-glance-2025.2, kserve-huggingfaceserver-cuda-13.3,...
CVE-2026-101918 vulnerabilities
Vulnerabilities for packages: openstack-manila-2026.1, openstack-placement-2025.1-fips, openstack-nova-2026.1, openstack-barbican-2026.1, nemo-rl-cuda-13.0, localstack, openstack-designate-2026.1, superset-fips, metaflow-service-fips, openstack-glance-2025.2, kserve-huggingfaceserver-cuda-13.3,...
GHSA-WVQV-FJ8W-QMHM vulnerabilities
Vulnerabilities for packages: authentik, openstack-horizon-2026.1-fips, openstack-horizon-2026.1...
GHSA-Q238-5CXM-5C9H vulnerabilities
Vulnerabilities for packages: authentik, openstack-horizon-2026.1-fips, openstack-horizon-2026.1...
GHSA-JWRC-G2Q2-PQ5P vulnerabilities
Vulnerabilities for packages: authentik-fips, superset-fips, nemo-rl-cuda-13.0, datadog-agent, kserve-huggingfaceserver-cuda-13.3, datadog-agent-fips...
CVE-2026-103001 vulnerabilities
Vulnerabilities for packages: authentik-fips, superset-fips, nemo-rl-cuda-13.0, datadog-agent, kserve-huggingfaceserver-cuda-13.3, datadog-agent-fips...