UnratedFix available
Ory Kratos v1.1.0
Type: patchSources: Ory Kratos
Ory Kratos v1.1.0 adds improved SSRF protection and an option to revoke active sessions after a password change.
- Products
- Ory Kratos
- Affected versions
- Not specified
- Fixed versions
- v1.1.0
- CVEs
- CVE-2023-4806
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 29 Oct 2026, 16:29 UTC · Revision 1
Source evidence
Ory Kratos v1.1.0 adds improved SSRF protection and an option to revoke active sessions after a password change.
Improved SSRF protection (#3629) (6d08576)
Ory Kratos
Fixed versions: v1.1.0
Complete source record
{
"id": "d43a4841536c46151bebd2d470a2e35d7df23fcf0735622a8f2d6709be343ebc",
"url": "https://github.com/ory/kratos/releases/tag/v1.1.0",
"method": "llm",
"payload": {
"kind": "patch",
"title": "Ory Kratos v1.1.0",
"summary": "Ory Kratos v1.1.0 adds improved SSRF protection and an option to revoke active sessions after a password change.",
"evidence": "Improved SSRF protection (#3629) (6d08576)",
"products": [
{
"name": {
"value": "Ory Kratos",
"evidence": "Ory Kratos v1.1 is the most complete, most scalable, and most secure open-source identity server on the planet"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "v1.1.0",
"evidence": "v1.1.0"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [
{
"value": "CVE-2023-4806",
"evidence": "chore: ignore CVE-2023-4806"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-ory-kratos",
"document_id": 22103,
"published_at": "2024-02-22T11:53:28+00:00"
}