Impact Score: 5/10
authentik: Release 2025.12.6
Source available — automated, not human-reviewed
Component: authentik · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
authentik version/2025.12.6. Source highlight: See https://docs.goauthentik.io/docs/releases/2025.12#fixed-in-2025126
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
🔧 Bug Fixes & Patches (6)
- website/docs: fix email link in CVE-2026-40166 (cherry-pick #22331 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22332
- enterprise/stages/mtls: attempt fix freezegun (cherry-pick #22474 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22499
- outposts: fix stale version in OutpostState (cherry-pick #22487 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22503
- ci: fix docs not having correct js version setup (2025.12)
- tenants: fix test teardown (version-2025.12)
- security: automated internal backport of patch GHSA-wr38-7xg8-fqxr.sec.patch to authentik-2025.12 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22724
📄 View Raw Release Notes (Original Developer Log)
See https://docs.goauthentik.io/docs/releases/2025.12#fixed-in-2025126
## What's Changed
* website/docs: fix email link in CVE-2026-40166 (cherry-pick #22331 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22332
* enterprise/stages/mtls: freeze time for expired certs (cherry-pick #22411 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22413
* root: configure freezegun to exclude cryptography (cherry-pick #22442 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22446
* enterprise/stages/mtls: attempt fix freezegun (cherry-pick #22474 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22499
* outposts: fix stale version in OutpostState (cherry-pick #22487 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22503
* ci: fix docs not having correct js version setup (2025.12) by @BeryJu in https://github.com/goauthentik/authentik/pull/22717
* tenants: fix test teardown (version-2025.12) by @gergosimonyi in https://github.com/goauthentik/authentik/pull/22714
* security: automated internal backport of patch GHSA-wr38-7xg8-fqxr.sec.patch to authentik-2025.12 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22724
* security: automated internal backport of patch GHSA-xp7f-xjjx-gwm8.sec.patch to authentik-2025.12 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22725
* security: automated internal backport of patch GHSA-c3m2-jqmq-pvp3.sec.patch to authentik-2025.12 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22723
**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.12.5...version/2025.12.6