Authelia | v4.39.17

Authelia v4.39.17 released on 09-04-2026


Authelia v4.39.17 is out now. Operators and end users benefit from improved login reliability and reduced crash risk during authentication and one-time-code processing.

See the full release notes and downloads on the Authelia GitHub; Docker images are available as authelia/authelia:4.39.17 and ghcr.io/authelia/authelia:4.39.17.

What’s in this release

  • Authentication fixes: addresses an edge-case cache miss, fixes the LDAPv3 version check and recovers a dereference panic in the one-time-code (OTC) handlers.
  • Authorization and OIDC: fixes AMR consistency for authorization decisions and adds configurable rate limits for OIDC endpoints.
  • Middleware and timing: tighter domain matching in middleware and NTP latency calculations using full precision; Docker images published for this release.

Upgrade notes

  • No breaking changes are listed in the release notes; test the upgrade in a staging environment and consult the GitHub release for full details.
  • To roll back, redeploy your previous Authelia container image tag (for example, the prior Docker image you were running).

Share your experience with v4.39.17 or report any issues on the Authelia GitHub so others can benefit from your notes.

Related posts

Weekly Tech Digest | 12 Oct 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

Removed SSRF beta detections in Cloudflare WAF

Cloudflare WAF Managed Rules have a habit of changing underneath you, and old SSRF names can linger long after the protection has gone. I prefer to check the live block logs, then test the ugly...

Weekly Tech Digest | 28 Sep 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.