zitadel

The Identity Infrastructure for Developers ZITADEL...

authentik

¿Qué es authentik? authentik es un proveedor de identidad IdP de código abierto para SSO moderno. Soporta SAML, OAuth2/OIDC, LDAP, RADIUS y más, diseñado para autoalojamiento desde laboratorios pequeños hasta grandes clústeres de producción. Nuestra oferta empresarial está disponible para...

kanidm

Kanidm - Simple and Secure Identity Management About Kanidm is a simple and secure identity management platform, allowing other applications and services to offload the challenge of authenticating and storing identities to Kanidm. The goal of this project is to be a complete identity provider,...

ash-authentication-oauth2-oidc-account-takeover-cve-2026-49757-email-based-user-matching

CVE-2026-49757 — AshAuthentication OAuth2/OIDC Account Takeover Proof of Concept for CVE-2026-49757 — a critical vulnerability in AshAuthentication where OAuth2/OIDC callbacks resolved to local user accounts by email address instead of the strategy, sub identity pair, allowing unauthenticated...

XML External Entity (XXE)

oauth2-oidc-sdk is vulnerable to XML external entity XXE attacks.The parse function in SAML2AssertionValidator.java does not disable access to external entities by default, allowing an attacker to submit a malicious XML document to perform requests on behalf of the server...