Impact Score: 5/10
authentik: Release 2023.10.4
Source available — automated, not human-reviewed
Component: authentik · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
authentik version/2023.10.4. Source highlight: See https://goauthentik.io/docs/releases/2023.10#fixed-in-2023104
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
🔧 Bug Fixes & Patches (5)
- providers/proxy: Fix duplicate cookies when using file system store. (cherry-pick #7541)
- providers/scim: fix missing schemas attribute for User and Group (cherry-pick #7477)
- events: fix missing model_* events when not directly authenticated (cherry-pick #7588)
- ci: fix permissions for release pipeline to publish binaries (cherry-pick #7512)
- security: fix CVE-2023-48228 (cherry-pick #7666)
📄 View Raw Release Notes (Original Developer Log)
See https://goauthentik.io/docs/releases/2023.10#fixed-in-2023104
## What's Changed
* providers/proxy: Fix duplicate cookies when using file system store. (cherry-pick #7541) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/7544
* stages/email: use uuid for email confirmation token instead of username (cherry-pick #7581) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/7584
* events: sanitize functions (cherry-pick #7587) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/7589
* providers/scim: fix missing schemas attribute for User and Group (cherry-pick #7477) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/7596
* events: fix missing model_* events when not directly authenticated (cherry-pick #7588) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/7597
* ci: fix permissions for release pipeline to publish binaries (cherry-pick #7512) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/7621
* core: bump golang from 1.21.3-bookworm to 1.21.4-bookworm (cherry-pick #7483) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/7622
* events: don't update internal service accounts unless needed (cherry-pick #7611) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/7640
* security: fix CVE-2023-48228 (cherry-pick #7666) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/7668
**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2023.10.3...version/2023.10.4