Starstruk Logo MarkStarstruk

v4.39.16

elkowar/ewwv4.39.16Mar 14, 2026by autheliabot

AI Summary

Contains critical security fixes and various improvements to authentication, configuration, and the user interface. It resolves issues related to filter escaping, OIDC profile claims, and UI stuck states.

Key Highlights

  • Security fixes for GHSA-gmfg-3v4q-9qr4
  • Fixed OIDC JWT profile claims policy hydration
  • Improved Docker build scripts for development
  • Fixed UI stuck state during 2FA enrollment

Full Release Notes

### Security Fixes

This release fixes security issues. For more information please see GHSA-gmfg-3v4q-9qr4.

### Bug Fixes

* **authentication:** discovery check too strict ([#11350](https://github.com/authelia/authelia/issues/11350)) ([5c1633b](https://github.com/authelia/authelia/commit/5c1633b767f28675cbcc3c7d723e9865fd506b80)), closes [#10840](https://github.com/authelia/authelia/issues/10840) by @james-d-elliott
* **authentication:** excessive filter escape ([#11285](https://github.com/authelia/authelia/issues/11285)) ([10f7603](https://github.com/authelia/authelia/commit/10f7603eb89ac0ca1bff1c8917a96e9c40900c01)), closes [#11284](https://github.com/authelia/authelia/issues/11284) by @james-d-elliott
* **configuration:** max retries default ([#11173](https://github.com/authelia/authelia/issues/11173)) ([f29bb95](https://github.com/authelia/authelia/commit/f29bb95e1040a9d19e8cd558e992456b24912737)) by @james-d-elliott
* disable npm scripts for docker dev build ([#11044](https://github.com/authelia/authelia/issues/11044)) ([4da3c53](https://github.com/authelia/authelia/commit/4da3c53b40b575105ff904ce193bf3f906f6e78c)) by @Crowley723
* ignore node modules for vite watchers ([#11412](https://github.com/authelia/authelia/issues/11412)) ([c8070f2](https://github.com/authelia/authelia/commit/c8070f283b6c593e8d6cca04f5810fd7dc515d08)) by @Crowley723
* improve root directory finding ([#11029](https://github.com/authelia/authelia/issues/11029)) ([d4529e3](https://github.com/authelia/authelia/commit/d4529e3899f007a25af0f4a739cc422c7e99f9db)) by @Crowley723
* **middlewares:** strip path incorrect match criteria ([#11402](https://github.com/authelia/authelia/issues/11402)) ([75a3b99](https://github.com/authelia/authelia/commit/75a3b99033f6530f0190fe1f42e9517fa40edda1)) by @james-d-elliott
* **oidc:** jwt profile claims policy hydration ([#10663](https://github.com/authelia/authelia/issues/10663)) ([24ee120](https://github.com/authelia/authelia/commit/24ee1205fc9ce9afbbed3c5b2bd4bb0b9c2e27cf)) by @james-d-elliott
* **server:** sanitise language cookie ([#11341](https://github.com/authelia/authelia/issues/11341)) ([ed66b2b](https://github.com/authelia/authelia/commit/ed66b2b2ce14a296e1aa654562caa53acfe4b860)) by @nightah
* **web:** ui stuck state enrolling 2fa ([#11367](https://github.com/authelia/authelia/issues/11367)) ([52f01f2](https://github.com/authelia/authelia/commit/52f01f2fa75d9ddacd40873168d76c4e74ea21a2)), closes [#10859](https://github.com/authelia/authelia/issues/10859) by @Br1an67

### New Contributors
* @kapec94 made their first contribution in https://github.com/authelia/authelia/pull/10841
* @n0rad made their first contribution in https://github.com/authelia/authelia/pull/10854
* @fortellerq made their first contribution in https://github.com/authelia/authelia/pull/11001
* @caiocdcs made their first contribution in https://github.com/authelia/authelia/pull/11045
* @spomata made their first contribution in https://github.com/authelia/authelia/pull/10999
* @xaabi6 made their first contribution in https://github.com/authelia/authelia/pull/11081
* @TheSander562 made their first contribution in https://github.com/authelia/authelia/pull/10899
* @moedtm made their first contribution in https://github.com/authelia/authelia/pull/10896
* @AlexViridi made their first contribution in https://github.com/authelia/authelia/pull/11130
* @tonyaellie made their first contribution in https://github.com/authelia/authelia/pull/11187
* @kiaraly made their first contribution in https://github.com/authelia/authelia/pull/11176
* @louisonsarlinmagnus made their first contribution in https://github.com/authelia/authelia/pull/11210
* @x0k made their first contribution in https://github.com/authelia/authelia/pull/11227
* @tomaszduda23 made their first contribution in https://github.com/authelia/authelia/pull/11225
* @wischi-chr made their first contribution in https://github.com/authelia/authelia/pull/9867
* @FlorianObermayer made their first contribution in https://github.com/authelia/authelia/pull/11248
* @andreasbrett made their first contribution in https://github.com/authelia/authelia/pull/11257
* @Br1an67 made their first contribution in https://github.com/authelia/authelia/pull/11367
* @tkf144 made their first contribution in https://github.com/authelia/authelia/pull/11399

### Docker Container
* `docker pull authelia/authelia:4.39.16`
* `docker pull ghcr.io/authelia/authelia:4.39.16`