Skip to content

security: fix CVE-2025-53942#15719

Merged
BeryJu merged 1 commit intomainfrom
security/CVE-2025-53942
Jul 22, 2025
Merged

security: fix CVE-2025-53942#15719
BeryJu merged 1 commit intomainfrom
security/CVE-2025-53942

Conversation

@BeryJu
Copy link
Member

@BeryJu BeryJu commented Jul 22, 2025

Details

REPLACE ME

Checklist

  • Local tests pass (ak test authentik/)
  • The code has been formatted (make lint-fix)

If an API change has been made

  • The API schema has been updated (make gen-build)

If changes to the frontend have been made

  • The code has been formatted (make web)

If applicable

  • The documentation has been updated
  • The documentation has been formatted (make docs)

@BeryJu
security: fix CVE-2025-53942
a74c920 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
@BeryJu BeryJu requested review from a team as code owners July 22, 2025 12:08
@netlify
Copy link

netlify bot commented Jul 22, 2025 •
edited
Loading

✅ Deploy Preview for authentik-docs ready!

Name Link
🔨 Latest commit a74c920
🔍 Latest deploy log https://app.netlify.com/projects/authentik-docs/deploys/687f7f40d45b070008870f3b
😎 Deploy Preview https://deploy-preview-15719--authentik-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify
Copy link

netlify bot commented Jul 22, 2025 •
edited
Loading

✅ Deploy Preview for authentik-integrations ready!

Name Link
🔨 Latest commit a74c920
🔍 Latest deploy log https://app.netlify.com/projects/authentik-integrations/deploys/687f7f405d893a00080196e0
😎 Deploy Preview https://deploy-preview-15719--authentik-integrations.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@codecov
Copy link

codecov bot commented Jul 22, 2025 •
edited
Loading

Codecov Report

Attention: Patch coverage is 95.23810% with 1 line in your changes missing coverage. Please review.

Project coverage is 93.18%. Comparing base (af2885a) to head (a74c920).
Report is 4 commits behind head on main.

✅ All tests successful. No failed tests found.

Files with missing lines Patch % Lines
authentik/core/middleware.py 75.00% 1 Missing ⚠️
Additional details and impacted files 
@@           Coverage Diff           @@
##             main   #15719   +/-   ##
=======================================
  Coverage   93.17%   93.18%           
=======================================
  Files         831      831           
  Lines       44161    44181   +20     
=======================================
+ Hits        41149    41169   +20     
  Misses       3012     3012
Flag Coverage Δ
e2e 46.60% <14.28%> (-0.02%) ⬇️
integration 23.46% <4.76%> (-0.01%) ⬇️
unit 91.28% <95.23%> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@netlify
Copy link

netlify bot commented Jul 22, 2025 •
edited
Loading

✅ Deploy Preview for authentik-storybook canceled.

Name Link
🔨 Latest commit a74c920
🔍 Latest deploy log https://app.netlify.com/projects/authentik-storybook/deploys/687f7f40c6217200086d111f

@BeryJu BeryJu merged commit 7a4c6b9 into main Jul 22, 2025
99 checks passed
@BeryJu BeryJu deleted the security/CVE-2025-53942 branch July 22, 2025 12:21
@BeryJu
Copy link
Member Author

BeryJu commented Jul 22, 2025

/cherry-pick version-2025.6

@BeryJu
Copy link
Member Author

BeryJu commented Jul 22, 2025

/cherry-pick version-2025.4

@gcp-cherry-pick-bot
Copy link
Contributor

gcp-cherry-pick-bot bot commented Jul 22, 2025

Cherry-pick failed with Merge error 7a4c6b9b50f8b837133a7a1fd2cb9b7f18a145cd into temp-cherry-pick-64dfac-version-2025.6

@gcp-cherry-pick-bot
Copy link
Contributor

gcp-cherry-pick-bot bot commented Jul 22, 2025

Cherry-pick failed with Merge error 7a4c6b9b50f8b837133a7a1fd2cb9b7f18a145cd into temp-cherry-pick-64dfac-version-2025.4

BeryJu added a commit that referenced this pull request Jul 22, 2025
@BeryJu
security: fix CVE-2025-53942 (#15719)
ce3f9e3 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
# Conflicts:
#	authentik/stages/user_login/stage.py
BeryJu added a commit that referenced this pull request Jul 22, 2025
@BeryJu
security: fix CVE-2025-53942 (#15719)
c3629d1 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
# Conflicts:
#	authentik/stages/user_login/stage.py
#	authentik/stages/user_login/tests.py
#	website/docs/sidebar.mjs
@github-actions
Copy link
Contributor

github-actions bot commented Jul 22, 2025

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-a74c920a6588b708a5ae79c756ecbe855fa47fcd
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-a74c920a6588b708a5ae79c756ecbe855fa47fcd

Afterwards, run the upgrade commands from the latest release notes.

@f0o
Copy link

f0o commented Jul 22, 2025 •
edited
Loading

When will the details about CVE-2025-53942 be disclosed?

//EDIT: Nevermind, it's part of the PR 🙃

tanberry pushed a commit to stazio/authentik that referenced this pull request Jul 24, 2025
@BeryJu @tanberry
security: fix CVE-2025-53942 (goauthentik#15719)
d9ef25f 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
@BeryJu BeryJu mentioned this pull request Jan 23, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@BeryJu @f0o