Security
فارسی
All products

github.com/authelia/authelia/v4

Go · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Authelia vulnerable to an authentication bypassed with malformed request URI on nginxCVE-2021-32637 · GHSA-68WM-PFJF-WQP6 github.com/authelia/authelia/v4 Go Critical Fix reported
Authelia allows open redirects on the logout endpointCVE-2021-29456 · GHSA-36F2-FCRX-FP4J github.com/authelia/authelia/v4 Go Medium Fix reported
Authelia has an Edge Case Access Control Rule MismatchCVE-2026-48794 · GHSA-J748-H363-WQJ8Version ranges need review. github.com/authelia/authelia/v4github.com/authelia/authelia Go Low Fix reported
Authelia Missing Username Canonicalization in Basic Auth (LDAP)CVE-2026-47203 · GHSA-HJJ4-HFJM-FMRJVersion ranges need review. github.com/authelia/authelia/v4github.com/authelia/authelia Go Low Fix reported
Authelia: Improper Neutralization of Input During Web Page Generation Leads to Potential Cross-site ScriptingCVE-2026-33525 · GHSA-GMFG-3V4Q-9QR4Version ranges need review. github.com/authelia/authelia/v4github.com/authelia/authelia Go Low Fix reported
Authelia applies regulation separately to Username-based logins to Email-based loginsCVE-2025-24806 · GHSA-M5MF-3963-4X26Version ranges need review. github.com/authelia/authelia/v4github.com/authelia/authelia Go Low Fix reported
Authelia's Group Changes may not have the expected results (YAML file backend)GHSA-X883-2VMG-XWF7 · GO-2024-2744Version ranges need review. github.com/authelia/authelia/v4 Go Low Fix reported