goauthentik Summary
Latest vulnerabilities published by goauthentik
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Authentication Flaw in Authentik Open-Source Identity Provider
CVE-2025-64708GoauthentikAuthentik5.8MEDIUMOAuth Service Account Authentication Issue in Authentik by Goauthentik
CVE-2025-64521GoauthentikAuthentik4.8MEDIUMOAuth/SAML Vulnerability in authentik Identity Provider
CVE-2025-53942GoauthentikAuthentik7.1HIGHAuthentication Bypass Vulnerability in authentik Identity Provider
CVE-2025-52553GoauthentikAuthentik5.5MEDIUMSession Management Flaw in Authentik Identity Provider
CVE-2025-29928GoauthentikAuthentik8HIGHStored XSS Vulnerability in Authentik by GoAuthentik
CVE-2024-11623GoauthentikAuthentik4.8MEDIUMauthentik fixed vulnerability in OAuth2 provider allowing malicious redirect URIs
CVE-2024-52289GoauthentikAuthentik7.9HIGHOAuth2 Device Code Flow Vulnerability
CVE-2024-38371GoauthentikAuthentik8.6HIGHAuthentik API-Access-Token Vulnerability Allows for Admin User Privileges Exploit
CVE-2024-37905GoauthentikAuthentik8.8HIGHPKCE downgrade attack in Authentik
CVE-2024-23647GoauthentikAuthentik6.5MEDIUMXSS in Authentik via JavaScript-URI as Redirect URI and form_post Response Mode
CVE-2024-21637GoauthentikAuthentik7.7HIGHAuthentik Fixes Issue with Token Requests
CVE-2023-48228goauthentikauthentik9.8CRITICALauthentik potential installation takeover when default admin user is deleted
CVE-2023-46249GoauthentikAuthentik9.7CRITICALUsername enumeration attack in goauthentik
CVE-2023-39522GoauthentikAuthentik5.3MEDIUMAuthentik lacks Proxy IP headers validation
CVE-2023-36456GoauthentikAuthentik8.3HIGHInsufficient user check in FlowTokens by Email stage
CVE-2023-26481GoauthentikAuthentik9.1CRITICALauthentik allows existing authenticated users to create arbitrary accounts
CVE-2022-46172GoauthentikAuthentik6.4MEDIUMauthentik vulnerable to Improper Authentication via invitation URL token reuse
CVE-2022-23555GoauthentikAuthentik9.4CRITICALauthentik vulnerable to unauthorized user creation and potential account takeover
CVE-2022-46145GoauthentikAuthentik8.1HIGH