UnratedFix available
Release 2026.8.0-rc7
Type: patchSources: authentik
authentik 2026.8.0-rc7 includes a change to use constant-time comparison in SecretKeyFilter.
- Products
- authentik
- Affected versions
- Not specified
- Fixed versions
- 2026.8.0-rc7
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 12:45 UTC · Revision 1
Source evidence
authentik 2026.8.0-rc7 includes a change to use constant-time comparison in SecretKeyFilter.
rbac: use constant-time comparison in SecretKeyFilter (cherry-pick #24888 to version-2026.8)
authentik
Fixed versions: 2026.8.0-rc7
Complete source record
{
"id": "97fa4ddfa62069e94b8f5339bb0e94ef775fe92d709fc65eef974f8f831620dd",
"url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2026.8.0-rc7",
"method": "llm",
"payload": {
"kind": "patch",
"title": "Release 2026.8.0-rc7",
"summary": "authentik 2026.8.0-rc7 includes a change to use constant-time comparison in SecretKeyFilter.",
"evidence": "rbac: use constant-time comparison in SecretKeyFilter (cherry-pick #24888 to version-2026.8)",
"products": [
{
"name": {
"value": "authentik",
"evidence": "Release notes from authentik"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2026.8.0-rc7",
"evidence": "Release 2026.8.0-rc7"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-goauthentik-authentik",
"document_id": 21215,
"published_at": "2026-08-10T22:16:59+00:00"
}