| id: GO-2025-4136 | |
| modules: | |
| - module: goauthentik.io | |
| non_go_versions: | |
| - fixed: 0.0.0-20251119135424-6672e6aaa41e | |
| skip_lint: true | |
| summary: authentik's invitation expiry is delayed by at least 5 minutes in goauthentik.io | |
| cves: | |
| - CVE-2025-64708 | |
| ghsas: | |
| - GHSA-ch7q-53v8-73pc | |
| references: | |
| - advisory: https://github.com/goauthentik/authentik/security/advisories/GHSA-ch7q-53v8-73pc | |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2025-64708 | |
| - web: https://github.com/goauthentik/authentik/commit/6672e6aaa41e0f2c9bfb1e4d8b51cf114969e830 | |
| notes: | |
| - Module deleted/moved, no longer responding to requests | |
| source: | |
| id: GHSA-ch7q-53v8-73pc | |
| created: 2025-12-15T13:03:53.94306022-05:00 | |
| review_status: UNREVIEWED |