kanidm

Kanidm - Simple and Secure Identity Management About Kanidm is a simple and secure identity management platform, allowing other applications and services to offload the challenge of authenticating and storing identities to Kanidm. The goal of this project is to be a complete identity provider,...

authentik

什么是 authentik？ authentik 是一个面向现代单点登录（SSO）的开源身份提供者（IdP）。它支持 SAML、OAuth2/OIDC、LDAP、RADIUS 等协议，专为自托管而设计，从小型实验室到大型生产集群均适用。 我们的企业版产品可供组织使用，以安全地替代 Okta、Auth0、Entra ID 和 Ping Identity 等现有 IdP，实现稳健的大规模身份管理。 安装 Docker Compose：推荐用于小型/测试环境。请参阅文档。 Kubernetes（Helm Chart）：推荐用于较大型环境。请参阅文档和 Helm chart 的仓库。 AWS...

kanidm v1.11.2

Kanidm - Simple and Secure Identity Management About Kanidm is a simple and secure identity management platform, allowing other applications and services to offload the challenge of authenticating and storing identities to Kanidm. The goal of this project is to be a complete identity provider,...

ash-authentication-oauth2-oidc-account-takeover-cve-2026-49757-email-based-user-matching

CVE-2026-49757 — Toma de control de cuentas OAuth2/OIDC de AshAuthentication Prueba de concepto para CVE-2026-49757 — una vulnerabilidad crítica en AshAuthentication donde los callbacks OAuth2/OIDC resolvían las cuentas de usuario locales por dirección de correo electrónico en lugar del par de...

XML External Entity (XXE)

oauth2-oidc-sdk is vulnerable to XML external entity XXE attacks.The parse function in SAML2AssertionValidator.java does not disable access to external entities by default, allowing an attacker to submit a malicious XML document to perform requests on behalf of the server...