Starstruk Logo MarkStarstruk

v4.39.16

google/magikav4.39.16Mar 14, 2026by autheliabot

AI Summary

This release addresses security vulnerabilities and fixes various bugs related to authentication, configuration, and the web interface. It also includes improvements to the Docker build process and introduces several new contributors to the project.

Key Highlights

  • Fixes security issues referenced in GHSA-gmfg-3v4q-9qr4.
  • Resolves authentication strictness and filter escape issues.
  • Fixes UI stuck state during 2FA enrollment.
  • Improves Docker build performance by ignoring node modules.
  • Updates OIDC JWT profile claims policy hydration.

Full Release Notes

### Security Fixes

This release fixes security issues. For more information please see GHSA-gmfg-3v4q-9qr4.

### Bug Fixes

* **authentication:** discovery check too strict ([#11350](https://github.com/authelia/authelia/issues/11350)) ([5c1633b](https://github.com/authelia/authelia/commit/5c1633b767f28675cbcc3c7d723e9865fd506b80)), closes [#10840](https://github.com/authelia/authelia/issues/10840) by @james-d-elliott
* **authentication:** excessive filter escape ([#11285](https://github.com/authelia/authelia/issues/11285)) ([10f7603](https://github.com/authelia/authelia/commit/10f7603eb89ac0ca1bff1c8917a96e9c40900c01)), closes [#11284](https://github.com/authelia/authelia/issues/11284) by @james-d-elliott
* **configuration:** max retries default ([#11173](https://github.com/authelia/authelia/issues/11173)) ([f29bb95](https://github.com/authelia/authelia/commit/f29bb95e1040a9d19e8cd558e992456b24912737)) by @james-d-elliott
* disable npm scripts for docker dev build ([#11044](https://github.com/authelia/authelia/issues/11044)) ([4da3c53](https://github.com/authelia/authelia/commit/4da3c53b40b575105ff904ce193bf3f906f6e78c)) by @Crowley723
* ignore node modules for vite watchers ([#11412](https://github.com/authelia/authelia/issues/11412)) ([c8070f2](https://github.com/authelia/authelia/commit/c8070f283b6c593e8d6cca04f5810fd7dc515d08)) by @Crowley723
* improve root directory finding ([#11029](https://github.com/authelia/authelia/issues/11029)) ([d4529e3](https://github.com/authelia/authelia/commit/d4529e3899f007a25af0f4a739cc422c7e99f9db)) by @Crowley723
* **middlewares:** strip path incorrect match criteria ([#11402](https://github.com/authelia/authelia/issues/11402)) ([75a3b99](https://github.com/authelia/authelia/commit/75a3b99033f6530f0190fe1f42e9517fa40edda1)) by @james-d-elliott
* **oidc:** jwt profile claims policy hydration ([#10663](https://github.com/authelia/authelia/issues/10663)) ([24ee120](https://github.com/authelia/authelia/commit/24ee1205fc9ce9afbbed3c5b2bd4bb0b9c2e27cf)) by @james-d-elliott
* **server:** sanitise language cookie ([#11341](https://github.com/authelia/authelia/issues/11341)) ([ed66b2b](https://github.com/authelia/authelia/commit/ed66b2b2ce14a296e1aa654562caa53acfe4b860)) by @nightah
* **web:** ui stuck state enrolling 2fa ([#11367](https://github.com/authelia/authelia/issues/11367)) ([52f01f2](https://github.com/authelia/authelia/commit/52f01f2fa75d9ddacd40873168d76c4e74ea21a2)), closes [#10859](https://github.com/authelia/authelia/issues/10859) by @Br1an67

### New Contributors
* @kapec94 made their first contribution in https://github.com/authelia/authelia/pull/10841
* @n0rad made their first contribution in https://github.com/authelia/authelia/pull/10854
* @fortellerq made their first contribution in https://github.com/authelia/authelia/pull/11001
* @caiocdcs made their first contribution in https://github.com/authelia/authelia/pull/11045
* @spomata made their first contribution in https://github.com/authelia/authelia/pull/10999
* @xaabi6 made their first contribution in https://github.com/authelia/authelia/pull/11081
* @TheSander562 made their first contribution in https://github.com/authelia/authelia/pull/10899
* @moedtm made their first contribution in https://github.com/authelia/authelia/pull/10896
* @AlexViridi made their first contribution in https://github.com/authelia/authelia/pull/11130
* @tonyaellie made their first contribution in https://github.com/authelia/authelia/pull/11187
* @kiaraly made their first contribution in https://github.com/authelia/authelia/pull/11176
* @louisonsarlinmagnus made their first contribution in https://github.com/authelia/authelia/pull/11210
* @x0k made their first contribution in https://github.com/authelia/authelia/pull/11227
* @tomaszduda23 made their first contribution in https://github.com/authelia/authelia/pull/11225
* @wischi-chr made their first contribution in https://github.com/authelia/authelia/pull/9867
* @FlorianObermayer made their first contribution in https://github.com/authelia/authelia/pull/11248
* @andreasbrett made their first contribution in https://github.com/authelia/authelia/pull/11257
* @Br1an67 made their first contribution in https://github.com/authelia/authelia/pull/11367
* @tkf144 made their first contribution in https://github.com/authelia/authelia/pull/11399

### Docker Container
* `docker pull authelia/authelia:4.39.16`
* `docker pull ghcr.io/authelia/authelia:4.39.16`