CVE-2025-64708

creationtimestamp| type| source ---|---|--- 2025-11-19 22:55:14+00:00| seen| https://bsky.app/profile/melizeche.com/post/3m5zdwlcgx22y...

CVE-2025-64708 authentik invitation expiry is delayed by at least 5 minutes

authentik is an open-source Identity Provider. Prior to versions 2025.8.5 and 2025.10.2, in previous authentik versions, invitations were considered valid regardless if they are expired or not, thus relying on background tasks to clean up expired ones. In a normal scenario this can take up to 5...