CVE-2026-1312 vulnerabilities

Vulnerabilities for packages: authentik, authentik-fips, awx, label-studio...

GHSA-33MW-Q7RJ-MJWJ vulnerabilities

Vulnerabilities for packages: authentik, authentik-fips, awx, label-studio...

CVE-2026-1285 vulnerabilities

Vulnerabilities for packages: authentik, authentik-fips, awx, label-studio...

GHSA-MWM9-4648-F68Q vulnerabilities

Vulnerabilities for packages: authentik, authentik-fips, awx, label-studio...

CVE-2025-14550 vulnerabilities

Vulnerabilities for packages: authentik, authentik-fips, awx, label-studio...

CVE-2026-1287 vulnerabilities

Vulnerabilities for packages: authentik, authentik-fips, awx, label-studio...

GHSA-2MCM-79HX-8FXW vulnerabilities

Vulnerabilities for packages: authentik, authentik-fips, awx, label-studio...

GHSA-GVG8-93H5-G6QQ vulnerabilities

Vulnerabilities for packages: authentik, authentik-fips, awx, label-studio...

CVE-2022-23555

authentik is an open-source Identity Provider focused on flexibility and versatility. Versions prior to 2022.11.4 and 2022.10.4 are vulnerable to Improper Authentication. Token reuse in invitation URLs leads to access control bypass via the use of a different enrollment flow than in the one...

CVE-2025-69226 vulnerabilities

Vulnerabilities for packages: authentik, awx, py3-vllm-cuda-12.4, checkov, open-webui, airflow, request-1276, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, kserve, dask-kubernetes, py3-cassandra-medusa, kubeflow-pipelines-visualization-server...

CVE-2025-69224 vulnerabilities

Vulnerabilities for packages: authentik, awx, py3-vllm-cuda-12.4, checkov, open-webui, airflow, request-1276, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, kserve, dask-kubernetes, py3-cassandra-medusa, kubeflow-pipelines-visualization-server...

CVE-2025-69227 vulnerabilities

Vulnerabilities for packages: authentik, awx, py3-vllm-cuda-12.4, checkov, open-webui, airflow, request-1276, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, kserve, dask-kubernetes, py3-cassandra-medusa, kubeflow-pipelines-visualization-server...

CVE-2025-69230 vulnerabilities

Vulnerabilities for packages: authentik, awx, py3-vllm-cuda-12.4, checkov, open-webui, airflow, request-1276, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, kserve, dask-kubernetes, py3-cassandra-medusa, kubeflow-pipelines-visualization-server...

GHSA-69F9-5GXW-WVC2 vulnerabilities

Vulnerabilities for packages: authentik, awx, py3-vllm-cuda-12.4, checkov, open-webui, airflow, request-1276, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, kserve, dask-kubernetes, py3-cassandra-medusa, kubeflow-pipelines-visualization-server...

GHSA-6JHG-HG63-JVVF vulnerabilities

Vulnerabilities for packages: authentik, awx, py3-vllm-cuda-12.4, checkov, open-webui, airflow, request-1276, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, kserve, dask-kubernetes, py3-cassandra-medusa, kubeflow-pipelines-visualization-server...

CVE-2025-69228 vulnerabilities

Vulnerabilities for packages: authentik, awx, py3-vllm-cuda-12.4, checkov, open-webui, airflow, request-1276, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, kserve, dask-kubernetes, py3-cassandra-medusa, kubeflow-pipelines-visualization-server...

GHSA-FH55-R93G-J68G vulnerabilities

Vulnerabilities for packages: authentik, awx, py3-vllm-cuda-12.4, checkov, open-webui, airflow, request-1276, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, kserve, dask-kubernetes, py3-cassandra-medusa, kubeflow-pipelines-visualization-server...

GHSA-JJ3X-WXRX-4X23 vulnerabilities

Vulnerabilities for packages: authentik, awx, py3-vllm-cuda-12.4, checkov, open-webui, airflow, request-1276, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, kserve, dask-kubernetes, py3-cassandra-medusa, kubeflow-pipelines-visualization-server...

GHSA-54JQ-C3M8-4M76 vulnerabilities

Vulnerabilities for packages: authentik, awx, py3-vllm-cuda-12.4, checkov, open-webui, airflow, request-1276, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, kserve, dask-kubernetes, py3-cassandra-medusa, kubeflow-pipelines-visualization-server...

SUSE CVE-2025-64521

authentik is an open-source Identity Provider. Prior to versions 2025.8.5 and 2025.10.2, when authenticating with clientid and clientsecret to an OAuth provider, authentik creates a service account for the provider. In previous authentik versions, authentication for this account was possible even...