goauthentik.io vulnerabilities (Go)
6 vulnerabilities.
-
goauthentik.ioGo authentik: XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user 8.5 High -
goauthentik.ioGo authentik invitation expiry is delayed by at least 5 minutes 5.8 Medium -
goauthentik.ioGo authentik deactivated service accounts can authenticate to OAuth 4.8 Medium -
goauthentik.ioGo authentik has an insufficient check for account active status during OAuth/SAML authentication 7.1 High -
goauthentik.ioGo authentik has Insufficient Authorization for several API endpoints 7.5 High -
goauthentik.ioGo PKCE downgrade attack in Authentik 6.5 Medium