version/2025.6.3
goauthentik/authentikversion/2025.6.3Jun 27, 2025by authentik-automation[bot]
Upgrading?
AI Summary
This release addresses a security vulnerability (CVE-2025-52553) alongside various bug fixes including LDAP group synchronization, user settings flow loops, and dependency updates.
Key Highlights
- Fixed CVE-2025-52553 security vulnerability
- Fixed LDAP sync on empty groups
- Fixed infinite loop in user settings flow
- Bumped Tornado to v6.5.1
- Improved documentation for RAC credentials
New Features
- Fixed CVE-2025-52553 security vulnerability
Full Release Notes
See https://docs.goauthentik.io/docs/releases/2025.6#fixed-in-202563 ## What's Changed * website/docs: add more to style guide (cherry-pick #14797) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15077 * ci: fix post-release e2e builds failing (cherry-pick #15082) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15092 * web/elements: Add light mode custom css handling (cherry-pick #14944) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15096 * core: bump tornado from 6.4.2 to v6.5.1 (cherry-pick #15100) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15116 * core: bump requests from 2.32.3 to v2.32.4 (cherry-pick #15129) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15135 * sources/ldap: fix sync on empty groups (cherry-pick #15158) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15171 * core: bump urllib3 from 2.4.0 to v2.5.0 (cherry-pick #15131) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15174 * core: bump protobuf from 6.30.2 to v6.31.1 (cherry-pick #14894) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15173 * website/docs: fixes misplaced sentence (cherry-pick #14998) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15182 * website/docs: fix egregious maintenance fail (cherry-pick #15176) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15180 * web/user: fix infinite loop when no user settings flow is set (cherry-pick #15188) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15192 * ci: fix CodeQL failing on cherry-pick PRs (cherry-pick #15205) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15206 * website/docs: add credentials prompt for rac doc (cherry-pick #14840) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15207 * website/docs: fix note at end of rac credentials prompt (cherry-pick #14909) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15208 * website/docs: Add steps to troubleshoot /initial-setup/ (cherry-pick #15011) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15210 * web/elements: typing error when variables are not converted to string (cherry-pick #15169) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15222 * core: bump goauthentik/fips-python from 3.13.3-slim-bookworm-fips to 3.13.5-slim-bookworm-fips in 2025.6 by @melizeche in https://github.com/goauthentik/authentik/pull/15274 * security: fix CVE-2025-52553 (cherry-pick #15289) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/15290 **Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.6.2...version/2025.6.3
Related Repositories
public-apis/public-apis★ 491,227
A collective list of free APIs
NousResearch/hermes-agent★ 256,100
The agent that grows with you
yt-dlp/yt-dlp★ 200,275
A feature-rich command-line audio/video downloader
microsoft/markitdown★ 191,565
Python tool for converting files and office documents to Markdown.
Significant-Gravitas/AutoGPT★ 187,701
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.