authentik-client vulnerabilities

CVEs whose affected-version data names the authentik-client package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-64521Medium· 4.8

10mo ago

authentik is an open-source Identity Provider. Prior to versions 2025.8.5 and 2025.10.2, when authenticating with client_id and client_se…

authentik is an open-source Identity Provider. Prior to versions 2025.8.5 and 2025.10.2, when authenticating with client_id and client_secret to an OAuth provider, authentik creates a service account for the provider. In previous authent…

▾ Sunlitauthentik-client · authentik-clientEPSS 0.22%via OSV