authelia/authelia Security Advisories | GitStock

low2026-06-26

CVE-2026-48794-Authelia has an Edge Case Access Control Rule Mismatch

GHSA-j748-h363-wqj8

low2026-05-29

CVE-2026-47203-Authelia Missing Username Canonicalization in Basic Auth (LDAP)

GHSA-hjj4-hfjm-fmrj

low2026-03-24

CVE-2026-33525-Authelia: Improper Neutralization of Input During Web Page Generation Leads to Potential Cross-site Scripting

GHSA-gmfg-3v4q-9qr4

low2025-02-19

CVE-2025-24806-Authelia applies regulation separately to Username-based logins to Email-based logins

GHSA-m5mf-3963-4x26

low2024-04-22

Authelia's Group Changes may not have the expected results (YAML file backend)

GHSA-x883-2vmg-xwf7

medium2023-03-16

CVE-2021-29456-Authelia allows open redirects on the logout endpoint

GHSA-36f2-fcrx-fp4j

critical2021-12-20

CVE-2021-32637-Authelia vulnerable to an authentication bypassed with malformed request URI on nginx

GHSA-68wm-pfjf-wqp6