kanidm

Kanidm - Gestione delle identità semplice e sicura Informazioni Kanidm è una piattaforma di gestione delle identità semplice e sicura, che consente ad altre applicazioni e servizi di delegare a Kanidm la sfida dell'autenticazione e dell'archiviazione delle identità. L'obiettivo di questo progetto...

authentik

What is authentik? authentik is an open-source Identity Provider IdP for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters. Our enterprise offering is available for organizations to securely replace existing...

ash-authentication-oauth2-oidc-account-takeover-cve-2026-49757-email-based-user-matching

CVE-2026-49757 — Acquisizione account OAuth2/OIDC AshAuthentication Proof of Concept per CVE-2026-49757 — una vulnerabilità critica in AshAuthentication in cui i callback OAuth2/OIDC risolvevano gli account utente locali tramite indirizzo email invece della coppia identità strategy, sub,...

kanidm v1.11.2

Kanidm - Simple and Secure Identity Management About Kanidm is a simple and secure identity management platform, allowing other applications and services to offload the challenge of authenticating and storing identities to Kanidm. The goal of this project is to be a complete identity provider,...

AshAuthentication vulnerable to OAuth2/OIDC account takeover via email-based user matching

Summary AshAuthentication's OAuth2 and OIDC family strategies matched the local user by email address rather than by the OpenID Connect iss/sub claim combination. A provider login presenting a victim's email including an unverified, reused, or emailverified: false account resolved to and signed i...

GHSA-777C-2FXX-QR28 AshAuthentication vulnerable to OAuth2/OIDC account takeover via email-based user matching

Summary AshAuthentication's OAuth2 and OIDC family strategies matched the local user by email address rather than by the OpenID Connect iss/sub claim combination. A provider login presenting a victim's email including an unverified, reused, or emailverified: false account resolved to and signed i...

CVE-2026-16336: URL Redirection to Untrusted Site

A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/trino-main/src/main/java/io/trino/server/ExternalUriInfo.java of the component OAuth2/OIDC. Performing a manipulation of the argument redirecturi results in open redirect. It is possible to initiate t...

CVE-2022-31034

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an SSO login is initiated from the Argo CD CLI or UI. The vulnerabilities are due to the use of insufficiently random values in...

CVE-2022-31034: Use of Insufficiently Random Values

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an SSO login is initiated from the Argo CD CLI or UI. The vulnerabilities are due to the use of insufficiently random values in...

XML External Entity (XXE)

oauth2-oidc-sdk is vulnerable to XML external entity XXE attacks.The parse function in SAML2AssertionValidator.java does not disable access to external entities by default, allowing an attacker to submit a malicious XML document to perform requests on behalf of the server...