Authelia v4.39.17 released on 09-04-2026

Authelia v4.39.17 is out now. Operators and end users benefit from improved login reliability and reduced crash risk during authentication and one-time-code processing.
See the full release notes and downloads on the Authelia GitHub; Docker images are available as authelia/authelia:4.39.17 and ghcr.io/authelia/authelia:4.39.17.
What’s in this release
- Authentication fixes: addresses an edge-case cache miss, fixes the LDAPv3 version check and recovers a dereference panic in the one-time-code (OTC) handlers.
- Authorization and OIDC: fixes AMR consistency for authorization decisions and adds configurable rate limits for OIDC endpoints.
- Middleware and timing: tighter domain matching in middleware and NTP latency calculations using full precision; Docker images published for this release.
Upgrade notes
- No breaking changes are listed in the release notes; test the upgrade in a staging environment and consult the GitHub release for full details.
- To roll back, redeploy your previous Authelia container image tag (for example, the prior Docker image you were running).
Share your experience with v4.39.17 or report any issues on the Authelia GitHub so others can benefit from your notes.

