We'll be publishing five security issues (GHSA-qgqp-xh8r-v73r, GHSA-h6c5-mpvq-j4jc, GHSA-cqj8-fxxf-9pg7, GHSA-m9h4-7j9c-55x9, GHSA-cxwx-9x59-28qm) and accompanying fixes on 2026-09-09 at 14:00 UTC with the Severity levels: High.
The patched '
ghcr.io/goauthentik/server' image will be available immediately, while the outpost images and binaries will follow within a few hours.
For more info, see the authentik Security policy here:
https://goauthentik.io/docs/security/policy.