v4.39.16
eythaann/Seelen-UIv4.39.16Mar 14, 2026by autheliabot
AI Summary
A security and bug fix release addressing authentication checks, middleware behavior, and OIDC profile claims.
Key Highlights
- Security fixes for vulnerabilities
- Fixes for discovery check and excessive filter escape
- Fixes OIDC JWT profile claims hydration
Full Release Notes
### Security Fixes This release fixes security issues. For more information please see GHSA-gmfg-3v4q-9qr4. ### Bug Fixes * **authentication:** discovery check too strict ([#11350](https://github.com/authelia/authelia/issues/11350)) ([5c1633b](https://github.com/authelia/authelia/commit/5c1633b767f28675cbcc3c7d723e9865fd506b80)), closes [#10840](https://github.com/authelia/authelia/issues/10840) by @james-d-elliott * **authentication:** excessive filter escape ([#11285](https://github.com/authelia/authelia/issues/11285)) ([10f7603](https://github.com/authelia/authelia/commit/10f7603eb89ac0ca1bff1c8917a96e9c40900c01)), closes [#11284](https://github.com/authelia/authelia/issues/11284) by @james-d-elliott * **configuration:** max retries default ([#11173](https://github.com/authelia/authelia/issues/11173)) ([f29bb95](https://github.com/authelia/authelia/commit/f29bb95e1040a9d19e8cd558e992456b24912737)) by @james-d-elliott * disable npm scripts for docker dev build ([#11044](https://github.com/authelia/authelia/issues/11044)) ([4da3c53](https://github.com/authelia/authelia/commit/4da3c53b40b575105ff904ce193bf3f906f6e78c)) by @Crowley723 * ignore node modules for vite watchers ([#11412](https://github.com/authelia/authelia/issues/11412)) ([c8070f2](https://github.com/authelia/authelia/commit/c8070f283b6c593e8d6cca04f5810fd7dc515d08)) by @Crowley723 * improve root directory finding ([#11029](https://github.com/authelia/authelia/issues/11029)) ([d4529e3](https://github.com/authelia/authelia/commit/d4529e3899f007a25af0f4a739cc422c7e99f9db)) by @Crowley723 * **middlewares:** strip path incorrect match criteria ([#11402](https://github.com/authelia/authelia/issues/11402)) ([75a3b99](https://github.com/authelia/authelia/commit/75a3b99033f6530f0190fe1f42e9517fa40edda1)) by @james-d-elliott * **oidc:** jwt profile claims policy hydration ([#10663](https://github.com/authelia/authelia/issues/10663)) ([24ee120](https://github.com/authelia/authelia/commit/24ee1205fc9ce9afbbed3c5b2bd4bb0b9c2e27cf)) by @james-d-elliott * **server:** sanitise language cookie ([#11341](https://github.com/authelia/authelia/issues/11341)) ([ed66b2b](https://github.com/authelia/authelia/commit/ed66b2b2ce14a296e1aa654562caa53acfe4b860)) by @nightah * **web:** ui stuck state enrolling 2fa ([#11367](https://github.com/authelia/authelia/issues/11367)) ([52f01f2](https://github.com/authelia/authelia/commit/52f01f2fa75d9ddacd40873168d76c4e74ea21a2)), closes [#10859](https://github.com/authelia/authelia/issues/10859) by @Br1an67 ### New Contributors * @kapec94 made their first contribution in https://github.com/authelia/authelia/pull/10841 * @n0rad made their first contribution in https://github.com/authelia/authelia/pull/10854 * @fortellerq made their first contribution in https://github.com/authelia/authelia/pull/11001 * @caiocdcs made their first contribution in https://github.com/authelia/authelia/pull/11045 * @spomata made their first contribution in https://github.com/authelia/authelia/pull/10999 * @xaabi6 made their first contribution in https://github.com/authelia/authelia/pull/11081 * @TheSander562 made their first contribution in https://github.com/authelia/authelia/pull/10899 * @moedtm made their first contribution in https://github.com/authelia/authelia/pull/10896 * @AlexViridi made their first contribution in https://github.com/authelia/authelia/pull/11130 * @tonyaellie made their first contribution in https://github.com/authelia/authelia/pull/11187 * @kiaraly made their first contribution in https://github.com/authelia/authelia/pull/11176 * @louisonsarlinmagnus made their first contribution in https://github.com/authelia/authelia/pull/11210 * @x0k made their first contribution in https://github.com/authelia/authelia/pull/11227 * @tomaszduda23 made their first contribution in https://github.com/authelia/authelia/pull/11225 * @wischi-chr made their first contribution in https://github.com/authelia/authelia/pull/9867 * @FlorianObermayer made their first contribution in https://github.com/authelia/authelia/pull/11248 * @andreasbrett made their first contribution in https://github.com/authelia/authelia/pull/11257 * @Br1an67 made their first contribution in https://github.com/authelia/authelia/pull/11367 * @tkf144 made their first contribution in https://github.com/authelia/authelia/pull/11399 ### Docker Container * `docker pull authelia/authelia:4.39.16` * `docker pull ghcr.io/authelia/authelia:4.39.16`