vulnerability in authentik (CVE-2026-40172). Data can be tampered with by attackers. Exploitable via `PATCH /api/v3/core/users/{pk}/`. Mitigation: upgrade to `2025.12.5, 2026.2.3` or later.
vulnerability in authentik (CVE-2026-40166). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v3/oauth2/access_tokens/.`. Mitigation: upgrade to `2025.12.5, 2026.2.3` or later.
SSRF in org.apache.fesod:fesod-sheet (CVE-2026-49328). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.2-incubating` or later.
vulnerability in rootio-openssh (ROOT-OS-DEBIAN-12-CVE-2023-51767). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:9.2p1-2+deb12u10.root.io.11` or later.