authentik-2026.2

Direct Vulnerabilities

Known vulnerabilities in the authentik-2026.2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Arbitrary Code Injection	<2026.2.6-r16
L GHSA-prg7-hcfm-mfcr	<2026.2.6-r16
L GHSA-f2ff-p2ww-7p4p	<2026.2.6-r16
L GHSA-3496-9g83-7v6x	<2026.2.6-r16
L Resource Exhaustion	<2026.2.6-r16
L Inefficient Regular Expression Complexity	<2026.2.6-r16
L Algorithmic Complexity	<2026.2.6-r16
L GHSA-pwgv-4x5q-6m9f	<2026.2.6-r16
L Directory Traversal	<2026.2.6-r9
L Information Exposure	<2026.2.6-r15
L GHSA-g6cj-pr64-35w5	<2026.2.6-r15
L CVE-2026-53878	<2026.2.6-r14
L CVE-2026-53877	<2026.2.6-r14
L GHSA-crhf-3pfg-w68w	<2026.2.6-r14
L GHSA-8qcx-xf44-272x	<2026.2.6-r14
L CVE-2026-48588	<2026.2.6-r14
L GHSA-3h9f-r86x-qvjx	<2026.2.6-r14
L GHSA-6hr6-w5qg-qmwg	<2026.2.6-r13
L HTTP Request Smuggling	<2026.2.6-r13
L GHSA-5p4m-2wfm-xmqj	<2026.2.6-r12
M Directory Traversal	<2026.2.6-r11
L Resource Exhaustion	<2026.2.6-r11
L Resource Exhaustion	<2026.2.6-r11
L GHSA-fxqj-rqcc-2cmp	<2026.2.6-r11
L CVE-2026-56852	<2026.2.6-r11
L Directory Traversal	<2026.2.6-r11
L GHSA-xvcm-6775-5m9r	<2026.2.6-r11
L Resource Exhaustion	<2026.2.6-r11
L GHSA-jpjm-c3r5-q96r	<2026.2.6-r11
L Algorithmic Complexity	<2026.2.6-r11
L GHSA-4x5r-pxfx-6jf8	<2026.2.6-r11
L Integer Overflow or Wraparound	<2026.2.6-r11
L GHSA-8ppf-4f7h-5ppj	<2026.2.6-r11
L GHSA-h35f-9h28-mq5c	<2026.2.6-r11
L GHSA-m4p7-r5rc-7g4j	<2026.2.6-r11
L GHSA-hm4w-wwcw-mr6r	<2026.2.6-r11
L CVE-2026-59890	<2026.2.6-r11
L GHSA-v56q-mh7h-f735	<2026.2.6-r11
L Improper Handling of Highly Compressed Data (Data Amplification)	<2026.2.6-r10
L GHSA-j5g9-f88f-gfj3	<2026.2.6-r10
L GHSA-6g55-p6wh-862q	<2026.2.6-r9
C Directory Traversal	<2026.2.6-r9
L GHSA-r28c-9q8g-f849	<2026.2.6-r9
L CVE-2026-14257	<2026.2.6-r7
L GHSA-mh99-v99m-4gvg	<2026.2.6-r7
L GHSA-52cp-r559-cp3m	<2026.2.6-r6
L Algorithmic Complexity	<2026.2.6-r6
L CVE-2026-13149	<2026.2.6-r6
L GHSA-3jxr-9vmj-r5cp	<2026.2.6-r6
L CVE-2026-7666	<2026.2.5-r9
L GHSA-mm6v-q8q9-pgcf	<2026.2.5-r9
L GHSA-qx2v-qp2m-jg93	<2026.2.5-r5
L GHSA-h67p-54hq-rp68	<2026.2.5-r5
L Inefficient Regular Expression Complexity	<2026.2.5-r5
L Cross-site Scripting (XSS)	<2026.2.5-r5
L Algorithmic Complexity	<2026.2.5-r5
L GHSA-2g4f-4pwh-qvx6	<2026.2.5-r5
L GHSA-wf6x-7x77-mvgw	<2026.2.5-r4
C Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<2026.2.5-r4
L GHSA-7c78-jf6q-g5cm	<2026.2.5-r2
L Improper Input Validation	<2026.2.5-r2
L CVE-2026-42505	<2026.2.5-r1
L GHSA-ff52-ph69-cf7x	<2026.2.5-r1
L Uncontrolled Memory Allocation	<2026.2.4-r12
L GHSA-5wrp-cwcj-q835	<2026.2.4-r12
L GHSA-ph9p-34f9-6g65	<2026.2.4-r11
H Directory Traversal	<2026.2.4-r11
L Uncontrolled Recursion	<2026.2.4-r10
L GHSA-25h7-pfq9-p65f	<2026.2.4-r10
C Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<2026.2.4-r10
L GHSA-rf6f-7fwh-wjgh	<2026.2.4-r10
L Inefficient Regular Expression Complexity	<2026.2.4-r9
L GHSA-7r86-cg39-jmmj	<2026.2.4-r9
L GHSA-23c5-xmqv-rm74	<2026.2.4-r9
H Inefficient Regular Expression Complexity	<2026.2.4-r9
L GHSA-3ppc-4f35-3m26	<2026.2.4-r9
L Algorithmic Complexity	<2026.2.4-r9
L GHSA-f886-m6hf-6m8v	<2026.2.6-r6
H Resource Exhaustion	<2026.2.6-r6
L GHSA-cp6g-7hqx-qxhp	<2026.2.4-r7
L CVE-2026-2303	<2026.2.4-r7
L GHSA-6v7p-g79w-8964	<2026.2.4-r6
H Untrusted Search Path	<2026.2.4-r5
L GHSA-hfvc-g4fc-pqhx	<2026.2.4-r5
L GHSA-4m7w-qmgq-4wj5	<2026.2.4-r4
L GHSA-537c-gmf6-5ccf	<2026.2.4-r4
L GHSA-63hw-fmq6-xxg2	<2026.2.4-r4
L Improper Resource Shutdown or Release	<2026.2.4-r4
L GHSA-9x8q-7h8h-wcw9	<2026.2.4-r4
L Information Exposure	<2026.2.4-r4
L GHSA-g3cq-j2xw-wf74	<2026.2.4-r4
L Improper Initialization	<2026.2.4-r4
L Improper Handling of Highly Compressed Data (Data Amplification)	<2026.2.4-r4
L Allocation of Resources Without Limits or Throttling	<2026.2.4-r4
L Allocation of Resources Without Limits or Throttling	<2026.2.4-r4
L GHSA-hpj7-wq8m-9hgp	<2026.2.4-r4
L GHSA-4fvr-rgm6-gqmc	<2026.2.4-r4
L GHSA-xcgm-r5h9-7989	<2026.2.4-r4
L Improper Validation of Certificate with Host Mismatch	<2026.2.4-r4
L Allocation of Resources Without Limits or Throttling	<2026.2.4-r4
L GHSA-2fqr-mr3j-6wp8	<2026.2.4-r4
L GHSA-w2q5-6q6x-x959	<2026.2.4-r3
L CVE-2026-39821	<2026.2.4-r3
L GHSA-65pc-fj4g-8rjx	<2026.2.4-r1
M Inefficient Regular Expression Complexity	<2026.2.4-r1
M CVE-2026-6907	<2026.2.1-r9
L GHSA-mf9v-mfxr-j63j	<2026.2.1-r9
M CVE-2026-35192	<2026.2.1-r9
L GHSA-w26r-rmm8-9c29	<2026.2.1-r9
L GHSA-5hrc-gvxj-w55p	<2026.2.1-r9
L Open Redirect	<2026.2.1-r9
L CVE-2026-5766	<2026.2.1-r9
L GHSA-7j59-v9qr-6fq9	<2026.2.1-r9
L GHSA-7h2m-m8vj-598h	<2026.2.1-r9
M Information Exposure	<2026.2.1-r9
L GHSA-qccp-gfcp-xxvc	<2026.2.1-r9
H Improper Handling of Highly Compressed Data (Data Amplification)	<2026.2.1-r9
C SQL Injection	<2026.2.1-r6
L GHSA-mh2q-q3fh-2475	<2026.2.1-r7
L Allocation of Resources Without Limits or Throttling	<2026.2.1-r7
L GHSA-j88v-2chj-qfwx	<2026.2.1-r6
L Improper Handling of Highly Compressed Data (Data Amplification)	<2026.2.1-r5
L Link Following	<2026.2.1-r5
L GHSA-fjrm-76x2-c4q4	<2026.2.1-r5
L GHSA-mf9w-mj56-hr94	<2026.2.1-r5
L GHSA-pwjp-ccjc-ghwg	<2026.2.1-r3
M HTTP Response Splitting	<2026.2.1-r3
L Allocation of Resources Without Limits or Throttling	<2026.2.1-r3
L CVE-2026-4277	<2026.2.1-r3
L CVE-2026-33033	<2026.2.1-r3
L GHSA-p998-jp59-783m	<2026.2.1-r3
L GHSA-mvfq-ggxm-9mc5	<2026.2.1-r3
L HTTP Response Splitting	<2026.2.1-r3
H Allocation of Resources Without Limits or Throttling	<2026.2.1-r3
L CVE-2026-3902	<2026.2.1-r3
L GHSA-3wq7-rqq7-wx6j	<2026.2.1-r3
L GHSA-933h-hp56-hf7m	<2026.2.1-r3
L GHSA-m5qp-6w8w-w647	<2026.2.1-r3
L GHSA-mmwr-2jhp-mc7j	<2026.2.1-r3
L Resource Exhaustion	<2026.2.1-r3
H Directory Traversal	<2026.2.1-r3
M Allocation of Resources Without Limits or Throttling	<2026.2.1-r3
L GHSA-2vrm-gr82-f7m5	<2026.2.1-r3
L GHSA-966j-vmvw-g2g9	<2026.2.1-r3
L CVE-2026-4292	<2026.2.1-r3
M Improper Input Validation	<2026.2.1-r3
L GHSA-w2fm-2cpv-w7v5	<2026.2.1-r3
C Out-of-Bounds	<2026.2.1-r3
L GHSA-5mf9-h53q-7mhq	<2026.2.1-r3
L GHSA-hcc4-c3v8-rx92	<2026.2.1-r3
L GHSA-p423-j2cm-9vmq	<2026.2.1-r3
L GHSA-mwh4-6h8g-pg8w	<2026.2.1-r3
L GHSA-63hf-3vf5-4wqf	<2026.2.1-r3
M Information Exposure	<2026.2.1-r3
L GHSA-c427-h43c-vf67	<2026.2.1-r3
M HTTP Response Splitting	<2026.2.1-r3
L CVE-2026-33034	<2026.2.1-r3
L GHSA-78h2-9frx-2jm8	<2026.2.1-r1
L Uncaught Exception	<2026.2.1-r1

Vulnerability

Vulnerable Version

Arbitrary Code Injection

<2026.2.6-r16