v3.4.14

calcom/cal.diyv3.4.14Jul 29, 2026by github-actions[bot]

AI Summary

This release focuses on security improvements within the login flow, specifically addressing vulnerabilities related to account pre-hijacking and ensuring proper authentication steps before enrollment.

Key Highlights

Prevented external-IDP account pre-hijack in Login V1
Required authentication before WebAuthn/U2F and TOTP/OTP enrollment

Full Release Notes

## [3.4.14](https://github.com/zitadel/zitadel/compare/v3.4.13...v3.4.14) (2026-07-29)


### Bug Fixes

* **login:** prevent external-IDP account pre-hijack in Login V1 ([da67750](https://github.com/zitadel/zitadel/commit/da677502e1d96c167dd9c630ef1295997b22c700))
* **login:** require authentication before WebAuthn/U2F and TOTP/OTP enrollment ([dd975b8](https://github.com/zitadel/zitadel/commit/dd975b8fc5bb20236b8ad535ebf4567d4e10f2f8))