GO-2026-4918 vulnerabilities

Vulnerabilities for packages: bank-vaults, cluster-api-aws-controller, db-operator, pluto, scorecard, opentelemetry-operator-fips, fleet-server-fips, go-sqlcmd, rancher-agent, rqlite-fips, json-exporter, cluster-api-gcp-controller-fips, aws-eks-pod-identity-agent-fips, falcosidekick-fips,...

CVE-2025-53942

creationtimestamp| type| source ---|---|--- 2025-07-24 00:48:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luocrsh5uf2j 2025-09-09 20:56:41+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76 2026-01-24 21:32:20+00:00| seen|...

CVE-2025-53942

authentik is an open-source Identity Provider that emphasizes flexibility and versatility, with support for a wide set of protocols. In versions 2025.4.4 and earlier, as well as versions 2025.6.0-rc1 through 2025.6.3, deactivated users who registered through OAuth/SAML or linked their accounts to...

CVE-2025-53942 authentik has an insufficient check for account active status during OAuth/SAML authentication

authentik is an open-source Identity Provider that emphasizes flexibility and versatility, with support for a wide set of protocols. In versions 2025.4.4 and earlier, as well as versions 2025.6.0-rc1 through 2025.6.3, deactivated users who registered through OAuth/SAML or linked their accounts to...

CVE-2025-53942

Summary of CVE-2025-53942 (authentik): Affected: authentik identity provider. Issue: deactivated users who registered via OAuth/SAML (or linked accounts) could remain partially active, enabling authorization of applications despite deactivation. Root cause: insufficient check for account active s...