goauthentik.io
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| authentik allows a deactivated Service account to authenticate to OAuth | goauthentik.ioauthentik-client | GoPyPI | Medium | Fix reported | |
| authentik's XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user | goauthentik.io | Go | High | Fix reported | |
| authentik's invitation expiry is delayed by at least 5 minutes | goauthentik.io | Go | Medium | Fix reported | |
| GoAuthentik vulnerable to Insufficient Authorization for several API endpoints | goauthentik.io | Go | Critical | Fix reported | |
| Authentik has insufficient check for account active status when authenticating with OAuth/SAML Sources | goauthentik.io | Go | High | Fix reported | |
| Authentik vulnerable to PKCE downgrade attack | goauthentik.io | Go | High | Fix reported |