authentik Releases

A minor patch release involving the single change of reverting the previously applied fix for a non-exploitable open redirect.

Apr 8, 2025

A comprehensive patch release addressing various bugs including system API issues, email formatting, LDAP pagination, user permission filters, and a specific security vulnerability (CVE-2025-29928).

Mar 28, 2025

Focuses on fixing data retrieval issues, permission checks for flow inspectors, and applying the same security patch (CVE-2025-29928) found in the 2025.2.3 release.

Mar 28, 2025

A large patch release with many UI and backend fixes, including SCIM dispatch methods, OAuth duplicate authentication, Kubernetes outpost reconciliation, and various web interface improvements.

Mar 17, 2025

Primarily documentation updates and minor code fixes related to email serialization and session cleanup.

Feb 26, 2025

The major 2025.2 release, containing very few code changes listed in the snippet, focusing on flow translation and RAC display fixes.

Feb 24, 2025

A significant maintenance release fixing authentication flows, cryptography paths, Python version updates (3.12.8), and various CI/CD pipeline issues.

Jan 29, 2025

Focuses on Kerberos authentication improvements, RBAC permissions endpoint access, and SAML response validation.

Jan 9, 2025

Jan 7, 2025

Jan 7, 2025

A small release adding documentation about impersonation and bindings, plus a websocket URL generation fix.

Dec 23, 2024

This release focuses on localization updates and configuration enhancements for PostgreSQL connections, including the exposure of connection management settings.

Dec 19, 2024

A maintenance release addressing database SSL configuration, API functionality, and various UI/flow issues including captcha sizing and error handling.

Dec 10, 2024

A bug fix release mirroring the issues found in 2024.8.6, specifically targeting OAuth2 and Proxy provider redirect URIs and migration dependencies.

Nov 21, 2024

A bug fix release targeting redirect URI handling in proxy and OAuth2 providers, alongside fixes for database migrations and API client versions.

Nov 21, 2024

A security release addressing multiple vulnerabilities (CVE-2024-52287 and CVE-2024-52289), along with fixes for LDAP permissions, RBAC descriptions, and Content Security Policy (CSP).

Nov 21, 2024

A security release addressing CVE-2024-52289, which requires database migration and introduces backwards incompatible changes.

Nov 21, 2024

This release introduces interactive captcha handling, brand-aware recovery flows, and fixes for issuer configuration and manual device code entry.

Nov 14, 2024

A maintenance release focusing on token index sizing, documentation corrections regarding invalidation flows, and API schema fixes.

Nov 5, 2024

Dec 25, 2023