Skip to content
Heist/ feed
Back to feed
UnratedFix available

Ory Kratos v1.1.0

Type: patchSources: Ory Kratos

Ory Kratos v1.1.0 adds improved SSRF protection and an option to revoke active sessions after a password change.

Products
Ory Kratos
Affected versions
Not specified
Fixed versions
v1.1.0
CVEs
CVE-2023-4806
Confirmed fixed CVEs
Not specified
Updated in this feed
29 Oct 2026, 16:29 UTC · Revision 1

Source evidence

Ory Kratos v1.1.0

github-ory-kratos · Original source

Published 22 Feb 2024, 11:53 UTC

Ory Kratos v1.1.0 adds improved SSRF protection and an option to revoke active sessions after a password change.

Improved SSRF protection (#3629) (6d08576)

Ory Kratos

Fixed versions: v1.1.0

Complete source record
{
  "id": "d43a4841536c46151bebd2d470a2e35d7df23fcf0735622a8f2d6709be343ebc",
  "url": "https://github.com/ory/kratos/releases/tag/v1.1.0",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Ory Kratos v1.1.0",
    "summary": "Ory Kratos v1.1.0 adds improved SSRF protection and an option to revoke active sessions after a password change.",
    "evidence": "Improved SSRF protection (#3629) (6d08576)",
    "products": [
      {
        "name": {
          "value": "Ory Kratos",
          "evidence": "Ory Kratos v1.1 is the most complete, most scalable, and most secure open-source identity server on the planet"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "v1.1.0",
            "evidence": "v1.1.0"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2023-4806",
        "evidence": "chore: ignore CVE-2023-4806"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-ory-kratos",
  "document_id": 22103,
  "published_at": "2024-02-22T11:53:28+00:00"
}