CVE-2026-25748

The vulnerability CVE-2026-25748 affects authentik prior to 2025.10.4 and 2025.12.4 in the Proxy Provider when used with Traefik or Caddy as reverse proxy. A malformed cookie could bypass authentication during forward authentication, causing missing authentik headers (X-Authentik-*) and potential...

CVE-2026-25748

authentik is an open-source identity provider. Prior to 2025.10.4 and 2025.12.4, with a malformed cookie it was possible to bypass authentication when using forward authentication in the authentik Proxy Provider when used in conjunction with Traefik or Caddy as reverse proxy. When a malicious...

AZL-77417 CVE-2026-2005 affecting package postgresql for versions less than 16.12-1

Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected...

CVE-2026-2005 PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected...

PT-2026-7894

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2025.8.6 authentik versions prior to 2025.10.4 authentik versions prior to 2025.12.4 Description authentik is an open-source identity provider. When using a SAML Source with the 'Verify Assertion Signature' option...

PT-2026-7893

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2025.10.4 authentik versions prior to 2025.12.4 Description authentik is an open-source identity provider. A malformed cookie could bypass authentication when using forward authentication with the authentik Proxy...

[SECURITY] Fedora 42 Update: rust-afterburn-5.10.0-3.fc42

A simple cloud provider agent...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: rancher, cluster-api-azure-controller, nuclei, spire-controller-manager, knative-serving, kyverno-policy-reporter-kyverno-plugin, vault-env, containerd, crossplane-provider-aws-firehose, skopeo, metallb, custom-pod-autoscaler-operator, flux-kustomize-controller,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: rancher, cluster-api-azure-controller, nuclei, spire-controller-manager, knative-serving, kyverno-policy-reporter-kyverno-plugin, vault-env, containerd, crossplane-provider-aws-firehose, skopeo, metallb, custom-pod-autoscaler-operator, flux-kustomize-controller,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: rancher, cluster-api-azure-controller, nuclei, spire-controller-manager, knative-serving, kyverno-policy-reporter-kyverno-plugin, vault-env, containerd, crossplane-provider-aws-firehose, skopeo, custom-pod-autoscaler-operator, flux-kustomize-controller, dask-gateway,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, contour, azure-service-operator, kubernetes-dashboard-api-fips, tekton-pipelines, crossplane-provider-azure-sql, trillian, amazon-ssm-agent, minio, lvm-driver-fips, sftpgo-plugin-pubsub, minify, caddy, kapp-controller,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, contour, azure-service-operator, kubernetes-dashboard-api-fips, tekton-pipelines, crossplane-provider-azure-sql, trillian, amazon-ssm-agent, minio, lvm-driver-fips, sftpgo-plugin-pubsub, minify, caddy, kapp-controller,...

[SECURITY] Fedora 43 Update: rust-afterburn-5.10.0-3.fc43

A simple cloud provider agent...

Siemens SCALANCE and RUGGEDCOM Covert Timing Channel (CVE-2025-9231)

Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private...

Keycloak fails to verify if an Identity Provider (IdP) is enabled before issuing tokens

A flaw was found in Keycloak. A vulnerability exists in the jwt-authorization-grant flow where the server fails to verify if an Identity Provider IdP is enabled before issuing tokens. The issuer lookup mechanism lookupIdentityProviderFromIssuer retrieves the IdP configuration but does not filter...

GHSA-37GF-GMXV-74WV Keycloak fails to verify if an Identity Provider (IdP) is enabled before issuing tokens

A flaw was found in Keycloak. A vulnerability exists in the jwt-authorization-grant flow where the server fails to verify if an Identity Provider IdP is enabled before issuing tokens. The issuer lookup mechanism lookupIdentityProviderFromIssuer retrieves the IdP configuration but does not filter...

org.keycloak.protocol.oidc.grants: Disabled identity providers are still accepted for JWT Authorization Grant

A flaw was found in Keycloak. A vulnerability exists in the jwt-authorization-grant flow where the server fails to verify if an Identity Provider IdP is enabled before issuing tokens. The issuer lookup mechanism lookupIdentityProviderFromIssuer retrieves the IdP configuration but does not filter...

CVE-2026-1486

A flaw was found in Keycloak. A vulnerability exists in the jwt-authorization-grant flow where the server fails to verify if an Identity Provider IdP is enabled before issuing tokens. The issuer lookup mechanism lookupIdentityProviderFromIssuer retrieves the IdP configuration but does not filter...

CVE-2026-1486

A flaw was found in Keycloak. A vulnerability exists in the jwt-authorization-grant flow where the server fails to verify if an Identity Provider IdP is enabled before issuing tokens. The issuer lookup mechanism lookupIdentityProviderFromIssuer retrieves the IdP configuration but does not filter...

CVE-2026-1486

A flaw was found in Keycloak. A vulnerability exists in the jwt-authorization-grant flow where the server fails to verify if an Identity Provider IdP is enabled before issuing tokens. The issuer lookup mechanism lookupIdentityProviderFromIssuer retrieves the IdP configuration but does not filter...