393 matches found
GHSA-5MF9-H53Q-7MHQ vulnerabilities
Vulnerabilities for packages: awx, authentik, label-studio, authentik-fips...
CVE-2026-33034 vulnerabilities
Vulnerabilities for packages: awx, authentik, label-studio, authentik-fips...
GHSA-PWJP-CCJC-GHWG vulnerabilities
Vulnerabilities for packages: awx, authentik, label-studio, authentik-fips...
GHSA-MMWR-2JHP-MC7J vulnerabilities
Vulnerabilities for packages: awx, authentik, label-studio, authentik-fips...
GHSA-933H-HP56-HF7M vulnerabilities
Vulnerabilities for packages: awx, authentik, label-studio, authentik-fips...
CVE-2026-4292 vulnerabilities
Vulnerabilities for packages: awx, authentik, label-studio, authentik-fips...
CVE-2026-3902 vulnerabilities
Vulnerabilities for packages: awx, authentik, label-studio, authentik-fips...
GHSA-MVFQ-GGXM-9MC5 vulnerabilities
Vulnerabilities for packages: awx, authentik, label-studio, authentik-fips...
CVE-2026-4277 vulnerabilities
Vulnerabilities for packages: awx, authentik, label-studio, authentik-fips...
CVE-2026-39892 vulnerabilities
Vulnerabilities for packages: pgadmin4, open-webui, dagster, label-studio, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk, kubeflow-volumes-web-app, metaflow-service, semgrep, superset, dask-kubernetes, py3-cassandra-medusa, opal, kubeflow-jupyter-web-app, barman, gitlab-cng-fips,...
CVE-2026-33033 vulnerabilities
Vulnerabilities for packages: awx, authentik, label-studio, authentik-fips...
GHSA-MJGH-79QC-68W3 vulnerabilities
Vulnerabilities for packages: awx, label-studio, authentik-fips...
GHSA-8P8V-WH79-9R56 vulnerabilities
Vulnerabilities for packages: awx, label-studio, authentik-fips...
CVE-2026-25674 vulnerabilities
Vulnerabilities for packages: awx, label-studio, authentik-fips...
CVE-2026-25673 vulnerabilities
Vulnerabilities for packages: awx, label-studio, authentik-fips...
CVE-2026-25922
authentik is an open-source identity provider. Prior to 2025.8.6, 2025.10.4, and 2025.12.4, when using a SAML Source that has the option Verify Assertion Signature under Verification Certificate enabled and not Verify Response Signature, or does not have the Encryption Certificate setting under...
CVE-2026-25748
authentik is an open-source identity provider. Prior to 2025.10.4 and 2025.12.4, with a malformed cookie it was possible to bypass authentication when using forward authentication in the authentik Proxy Provider when used in conjunction with Traefik or Caddy as reverse proxy. When a malicious...
CVE-2026-25227
authentik is an open-source identity provider. From 2021.3.1 to before 2025.8.6, 2025.10.4, and 2025.12.4, when using delegated permissions, a User that has the permission Can view Property Mapping or Can view Expression Policy is able to execute arbitrary code within the authentik server contain...
CVE-2026-25227
authentik is an open-source identity provider. From 2021.3.1 to before 2025.8.6, 2025.10.4, and 2025.12.4, when using delegated permissions, a User that has the permission Can view Property Mapping or Can view Expression Policy is able to execute arbitrary code within the authentik server contain...
CVE-2026-25922
authentik is an open-source identity provider. Prior to 2025.8.6, 2025.10.4, and 2025.12.4, when using a SAML Source that has the option Verify Assertion Signature under Verification Certificate enabled and not Verify Response Signature, or does not have the Encryption Certificate setting under...