version/2025.2.3

goauthentik/authentikversion/2025.2.3Mar 28, 2025by authentik-automation[bot]

Upgrading?

AI Summary

A comprehensive patch release addressing various bugs including system API issues, email formatting, LDAP pagination, user permission filters, and a specific security vulnerability (CVE-2025-29928).

Key Highlights

  • Fixed system API usage when using bearer tokens.
  • Fixed LDAP paginator going into an infinite loop.
  • Fixed CVE-2025-29928 security vulnerability.
  • Fixed email newline characters in TemplateEmailMessage.

Full Release Notes

See https://docs.goauthentik.io/docs/releases/2025.2#fixed-in-202523

## What's Changed
* admin: fix system API when using bearer token (cherry-pick #13651) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/13654
* stages/email: Clean newline characters in TemplateEmailMessage (cherry-pick #13666) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/13667
* outposts/ldap: fix paginator going into infinite loop (cherry-pick #13677) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/13679
* web/admin: reworked sync status card (cherry-pick #13625) by @rissson in https://github.com/goauthentik/authentik/pull/13692
* core: fix core/user is_superuser filter (cherry-pick #13693) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/13694
* core: fix non-exploitable open redirect (cherry-pick #13696) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/13698
* stages/identification: refresh captcha on failure (cherry-pick #13697) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/13699
* security: fix CVE-2025-29928 (cherry-pick #13695) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/13700


**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.2.2...version/2025.2.3

Related Repositories