CRITICAL10.0CVE-2021-32637Authelia vulnerable to an authentication bypassed with malformed request URI on nginx >= 4.0.0-alpha1, < 4.29.3
MEDIUM5.4CVE-2021-29456Authelia allows open redirects on the logout endpoint from 0, < 4.28.0
—CVE-2026-48794Authelia has an Edge Case Access Control Rule Mismatch in github.com/authelia/authelia >= 4.36.0, < 4.39.20
—Authelia has an Edge Case Access Control Rule Mismatch in github.com/authelia/authelia
>= 4.36.0, < 4.39.20
—Authelia Missing Username Canonicalization in Basic Auth (LDAP) in github.com/authelia/authelia
>= 4.38.0, < 4.39.20
—Authelia Missing Username Canonicalization in Basic Auth (LDAP) in github.com/authelia/authelia
>= 4.38.0, < 4.39.20
—Authelia: Improper Neutralization of Input During Web Page Generation Leads to Potential Cross-site Scripting in github.com/authelia/authelia
>= 4.39.15, < 4.39.16
—Authelia: Improper Neutralization of Input During Web Page Generation Leads to Potential Cross-site Scripting in github.com/authelia/authelia
>= 4.39.15, < 4.39.16
—Authelia applies regulation separately to Username-based logins to Email-based logins in github.com/authelia/authelia
from 0, < 4.38.19
—Authelia applies regulation separately to Username-based logins to Email-based logins in github.com/authelia/authelia
from 0, < 4.38.19