453 matches found
PT-2026-70112
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. The SCIM user inges...
PT-2026-70109
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adop...
CVE-2026-53878 vulnerabilities
Vulnerabilities for packages: authentik, openstack-horizon-2026.1, authentik-fips, openstack-horizon-2026.1-fips...
GHSA-CRHF-3PFG-W68W vulnerabilities
Vulnerabilities for packages: authentik, openstack-horizon-2026.1, authentik-fips, openstack-horizon-2026.1-fips...
GHSA-3H9F-R86X-QVJX vulnerabilities
Vulnerabilities for packages: authentik, openstack-horizon-2026.1, authentik-fips, openstack-horizon-2026.1-fips...
GHSA-8QCX-XF44-272X vulnerabilities
Vulnerabilities for packages: authentik, openstack-horizon-2026.1, authentik-fips, openstack-horizon-2026.1-fips...
CVE-2026-53877 vulnerabilities
Vulnerabilities for packages: authentik, openstack-horizon-2026.1, authentik-fips, openstack-horizon-2026.1-fips...
CVE-2026-48588 vulnerabilities
Vulnerabilities for packages: authentik, openstack-horizon-2026.1, authentik-fips, openstack-horizon-2026.1-fips...
GHSA-6HR6-W5QG-QMWG vulnerabilities
Vulnerabilities for packages: mitmproxy, localstack, airflow, authentik-fips, authentik, jupyter-all-spark-notebook, prefect-fips, open-webui, apache-beam-python-3.14-sdk...
CVE-2026-71554 vulnerabilities
Vulnerabilities for packages: mitmproxy, localstack, airflow, authentik-fips, authentik, jupyter-all-spark-notebook, prefect-fips, open-webui, apache-beam-python-3.14-sdk...
GHSA-5P4M-2WFM-XMQJ vulnerabilities
Vulnerabilities for packages: arangodb, code-server, authentik-fips, kibana, langfuse, foxx-cli, lerna, gitlab-rails-ce-fips, mongod, pulumi, saf, wazuh-dashboard, percona-server-mongodb, unleash-fips, prism, wazuh-dashboard-fips, eslint, redisinsight, authentik, ts-patch,...
CVE-2026-69153 vulnerabilities
Vulnerabilities for packages: arangodb, keep-fips, pelias-api, semaphore, authentik-fips, cadence-web, langfuse, authentik, keep, langfuse-fips, nextcloud-server, saf, vitess, gitlab-rails-ce, kubeflow-pipelines, gitlab-rails-ce-fips, renovate...
GHSA-FXQJ-RQCC-2CMP vulnerabilities
Vulnerabilities for packages: arangodb, keep-fips, pelias-api, semaphore, authentik-fips, cadence-web, langfuse, authentik, keep, langfuse-fips, nextcloud-server, saf, vitess, gitlab-rails-ce, kubeflow-pipelines, gitlab-rails-ce-fips, renovate...
GHSA-RGW5-RVV9-X895 vulnerabilities
Vulnerabilities for packages: arangodb, authentik-fips, langfuse, foxx-cli, bash-language-server, nextcloud-server, opentelemetry-auto-instrumentations-node, serve, gitlab-rails-ce-fips, rancher-api-ui, dotstatsuite-supercore, pulumi, saf, wazuh-dashboard, gemini-cli, prism, azurite,...
CVE-2026-69152 vulnerabilities
Vulnerabilities for packages: arangodb, authentik-fips, langfuse, foxx-cli, bash-language-server, nextcloud-server, opentelemetry-auto-instrumentations-node, serve, gitlab-rails-ce-fips, rancher-api-ui, dotstatsuite-supercore, pulumi, saf, wazuh-dashboard, gemini-cli, prism, azurite,...
GHSA-PM4M-PH32-GHV5 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, authentik-fips, renovate...
GHSA-6G55-P6WH-862Q vulnerabilities
Vulnerabilities for packages: arangodb, keep-fips, pelias-api, semaphore, authentik-fips, cadence-web, langfuse, authentik, keep, nextcloud-server, gitlab-rails-ce, langfuse-fips, gitlab-rails-ce-fips, vitess...
GHSA-R28C-9Q8G-F849 vulnerabilities
Vulnerabilities for packages: arangodb, authentik-fips, cadence-web, langfuse, nextcloud-server, gitlab-rails-ce-fips, unleash-fips, librechat, keep-fips, pelias-api, semaphore, authentik, homepage, vitess, unleash, keep, jitsucom-jitsu, gitlab-rails-ce, langfuse-fips...
CVE-2026-45623 vulnerabilities
Vulnerabilities for packages: arangodb, keep-fips, pelias-api, semaphore, authentik-fips, cadence-web, langfuse, authentik, keep, nextcloud-server, gitlab-rails-ce, langfuse-fips, gitlab-rails-ce-fips, vitess...