Is authentik 2022.12.3 patched?
Current stable (2026.5.3): 100/100
2022.12.3 has 20 open critical-or-high vulnerabilities. Run 2025.12.6 or later to clear them. See what 2025.12.6 fixes →
Summary iPlain-English security status for authentik 2022.12.3, built from its CVEs, active-exploitation data, end-of-life date and latest release.
authentik 2022.12.3 is part of the 2022.12 release line. 26 known vulnerabilities affect it. The minimum safe version is 2025.12.6 — upgrade to it or later to clear the open critical/high issues. The 2022.12 line reached end-of-life on 2023-02-14, so it no longer receives security patches. The latest supported authentik release is 2026.5.3.
Known issues affecting 2022.12.3
Exploited first, then by exploitation probability.
CVE-2023-48228 HIGH EPSS 1% → fixed in 2023.10.4 CVE-2024-52289 CRITICAL EPSS 1% → fixed in 2024.10.3 CVE-2024-37905 HIGH EPSS 1% → fixed in 2024.4.3 CVE-2023-46249 CRITICAL EPSS 1% → fixed in 2023.10.2 CVE-2026-25227 CRITICAL EPSS 1% → fixed in 2025.12.4 CVE-2024-38371 HIGH EPSS 1% → fixed in 2024.4.3 CVE-2023-36456 HIGH EPSS 1% → fixed in 2023.5.5 CVE-2024-52287 HIGH EPSS 1% → fixed in 2024.10.3 CVE-2024-42490 HIGH EPSS 1% → fixed in 2024.6.4 CVE-2024-47070 CRITICAL EPSS 1% → fixed in 2024.8.3 CVE-2024-23647 MEDIUM EPSS 1% → fixed in 2023.10.7 CVE-2024-52307 MEDIUM EPSS 1% → fixed in 2024.10.3 CVE-2023-39522 MEDIUM EPSS 1% → fixed in 2023.6.2 CVE-2026-25748 HIGH EPSS 0% → fixed in 2025.12.4 CVE-2025-53942 HIGH EPSS 0% → fixed in 2025.6.4 CVE-2025-52553 CRITICAL EPSS 0% → fixed in 2025.6.3 CVE-2024-47077 MEDIUM EPSS 0% → fixed in 2024.8.3 CVE-2025-29928 HIGH EPSS 0% → fixed in 2025.2.3 CVE-2026-42849 CRITICAL EPSS 0% → fixed in 2026.2.3 CVE-2026-49448 CRITICAL EPSS 0% → fixed in 2026.5.1Other authentik versions
Check another release line of authentik.
Frequently asked
Is authentik 2022.12.3 patched?
authentik 2022.12.3 is end-of-life and no longer receives security patches. Move to 2026.5.3.
What version should I upgrade authentik 2022.12.3 to?
Upgrade authentik 2022.12.3 to at least 2025.12.6 to clear its 20 open critical-or-high vulnerabilities.
When does authentik 2022.12 reach end-of-life?
authentik 2022.12 reached end-of-life on 2023-02-14 and no longer receives security patches.
What is the latest version of authentik?
The latest supported authentik release is 2026.5.3.
Is authentik 2022.12.3 still receiving security updates?
No — authentik 2022.12.3 is on the 2022.12 line, which reached end-of-life on 2023-02-14 and no longer receives security updates. Upgrade to 2026.5.3 or later to stay supported.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against authentik's official advisory before you patch or upgrade — authentik official site ↗