Security & Privacy

Tor Browser 15.0.22 is now available from the Tor Browser download page and also from our distribution directory . This version includes important security updates to Tor. Send us…

Full Changelog: https://github.com/sqlcipher/sqlcipher-android/compare/v4.18.0...v4.19.0

Bound HTTP metric cardinality and add core request counter for telemetry; Accept iLO 7 "hpeiLO-" prompt in HP iLO rotation for secret rotation

Remove the website attribute from configuration; Fix OIDC client auth config strategy; Fix OIDC client credentials subject foreign key violation; Fix OIDC resource indicators…

Configure a Deny All rule within Tenant Access Control List (ACL) to reject all incoming traffic to assigned scope using the new matchall: true attribute

Make many-to-one AWS Secrets Manager sync only target one secret; Allow one LDAP connection to back many Linux and Windows syncs; Coalesce concurrent secret reference folder…

Added automatic protocol selection; Added user country detection; Added app links support; Added dynamic trial days; Added welcome back feature; Updated Platform SDK; Updated…

Add Protect tab with real-time protection management, suspicious message scam checking, and protection activity review; Improve search speed for cities and countries to load…

Fixed local memory corruption bug in reencrypt init.; Fixed integer overflow in AFsplitsectors().; Fixed error path in cryptheaderrestore.; Fixed non-terminating loop on bitlk…

Add Sudoku proxy protocol support; Support dedicated DNS routing for direct domains, DNS over TCP, DNSCrypt upstreams, and multiple servers in CNAME/Host rules; Migrate Tailscale…

Make RIOBind reads return byte counts; Deprecate rbinisstatic as requested by R2590; Dont recover fp vars in frame-less functions; Fix switch ownership when analyzing overlapping…

Support for importing encrypted Proton Authenticator exports; Prevent maliciously crafted icon packs from overwriting Aegis' internal files including the vault file

Use authenticated encryption for IDP intent tokens; Authorize IDP linking via enrollment guard, not isSessionValid; Translate authentication and OTP strings; Check auth method…

Serve networks with peer-based routers from the SQLite network map in management

Rosenpass now works through the embedded reverse proxy in permissive mode; Lazy connections reworked with per-peer lazy state and proxy peers lazy by default; Agent Network / LLM…

Avoid unbounded reliable TLS timeout in reliability layer and ignore acks for packets that cannot be outstanding; Fix CreateProcess() command line quoting for characters special…

Option to download issues as a CSV file from the Issues tab; Security fixes included in this release

Updated Firefox to 140.15.0esr; Updated NoScript to 13.6.32.1984; Updated uBlock Origin to 1.74.0; Websites can no longer initiate a WebSocket connection to a lan/localhost port…

Fix false positive in bot detection feature for Brave Browser with shields enabled; Add HasValidChallengeCookie() helper; Return an empty slice instead of null when querying…

Fix access token JWT upgrade in storage

Tails and Tor Browser now follow a 2-week release cadence starting with this version

Self-service configuration of Third-Party Application Access through the My Organization API and Embeddable UI Components; Self-service configuration of Cross App Access (XAA)…

Create a managed local admin account on Windows hosts (requires fleetd 1.60.0 or higher); Default fleet assignment for new Windows MDM enrollments via user-driven enrollment…

Tag: v4.7.3

Improved Wipr Extra functionality on many websites; Improved diagnostics and issue reporting

Homebrew installs of Semgrep are no longer supported on Intel Macs

Add a release budget for Fleet-initiated activities (policy-automation software installs and scripts, and iOS/iPadOS scheduled app updates) that queues them immediately but…

Update go.etcd.io/etcd/client/pkg/v3 to v3.7.1 to fix security vulnerability GO-2026-6107; Update software.sslmate.com/src/go-pkcs12 to v0.7.2 to fix security vulnerability…

See https://docs.goauthentik.io/docs/releases/2026.8fixed-in-202681

We're always working on new features, bug fixes, and performance improvements. Make sure you stay updated with the latest version for the best authentication experience.

Bug fixes.

Refresh the connection experience with faster and more reliable connections; Fixed crashes; Polish sign-in experience

Bot detection feature for CrowdSec WAF that serves clients a challenge and fingerprinting page to evaluate legitimacy; Dedicated Kubernetes datasource that fetches logs directly…

Made minor under-the-hood changes to prepare for future UI improvements.

Fix LDAP client implementation certificate hostname verification; Fix required signed-JWT assertion policy bypass with unsigned assertion headers; Fix organization managers…

Correct caching and relations of well-known app link files; Prevent cross-instance caching of well-known app link files; Support Zitadel Support IDP in console; Don't prepend base…

Optimized network performance to deliver faster, more stable connections; Fixed minor bugs

MCP server for working with scans and issues from your preferred AI client; Burp AI available to buy for Cloud customers

Wipr Extra improvements on many websites

Semgrep is now built with OCaml 5.4 instead of OCaml 5.3

Services can be defined for privileged access, including SSH through Tailscale Privileged Access Management

Only free countries are connectable for free tier users (behind feature flag).; Remove non ASCII chars for user facing strings.; Scrolling protocols dropdown triggered callback…

Fix possible injection of scriptlets requiring trust from non-trusted sources; Import google-ima-dai shim from AdGuard shims; Replace List-KR with filterslists-KO; Remove support…

Fixed heap buffer overflow in CMS key unwrapping; Fixed invalid pointer dereference in CMP server via crafted protectionAlg; Fixed excessive memory use buffering DTLS records for…

Fixed heap buffer overflow in CMS key unwrapping; Fixed invalid pointer dereference in CMP server via crafted protectionAlg; Fixed RPK server signature algorithm selection being…

Aperture is now generally available for securing and managing AI agents and LLM sessions; Cost controls for AI agent and LLM session management; Request and response hooks for AI…

We're always working on new features, bug fixes, and performance improvements. Make sure you stay updated with the latest version for the best authentication experience.

Use the web content blocker to block access to malicious websites while connected to the Dausos VPN connection protocol; Improved the Dausos protocol experience; Added minor bug…

Made minor under-the-hood changes to prepare for future UI improvements.

Fix Debian cross-linking with xx-cargo; Fix playwright test; Misc fixes and updates; Include user email in successful login logs; Fix sendmail executable permission check; Add…

MultiHop Servers feature for enhanced privacy with two-step encrypted connections; Static IP Servers for fixed IP addresses enabling stable remote work, gaming, or specific…

Create file upload component; Add bit-table-v2 and related components; Add Windows biometrics format based on SDK cryptography; Add Delinea XML parser for imports; Add missing IPC…

A setting to turn off onboarding hints across sessions and devices; The ability to resend verification emails from the email confirmation screen; The ability to copy a day's…

Fixed CVE-2026-45292 OpenTelemetry Java SDK unbounded memory allocation in W3C Baggage Propagation; Fixed CVE-2026-14613 fine-grained admin permissions bypass via role groups…

Blueprints now emit draft-07 definitions instead of $defs; Add object attributes documentation; Fix DCR missing csrfexempt in OAuth2 providers; Fix missing preview banner for…

Patch XSS in Regular expression module; Add XPRESS (MS-XCA) decompression operations; Add support for Node 26; Add Modular Exponentiation operation; Use js-yaml for both JSON to…

Ensure internal operation types cannot be dispatched from inline authentication and workflows, preventing token creation; Also enforce allowedipsanscidr on IP SANs from CSRs; Fix…

Go version has been updated to prevent the possibility of exploiting Go vulnerabilities fixed in 1.26.6; AdGuard Home is now more resistant to resource exhaustion attacks when…

Support for Room 3; Requires compileSdk 37

Transaction monitoring feature to scan charges and flag unusual patterns, repeating transactions, and suspicious vendors; Monitor section reorganized to include Transaction…