CVE-2025-24806

Description

Authelia applies regulation separately to Username-based logins to Email-based logins in github.com/authelia/authelia

Affected packages (3)

• Go/github.com/authelia/autheliafrom 0
• Go/github.com/authelia/authelia/v4from 0, < 4.38.19
• Go/github.com/authelia/authelia/v4from 0, < 4.38.19

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-24806
• PATCHhttps://github.com/authelia/authelia
• WEBhttps://github.com/authelia/authelia/commit/d4a54189aa6563912f9427b96dcb01eacafa785c
• WEBhttps://github.com/authelia/authelia/security/advisories/GHSA-m5mf-3963-4x26