ryannathans ,

I literally just finished setting up an nginx server with authentication to avoid authelia

n0xew ,

There hasn't been any release since a year either, the last one being 4.37.5 https://github.com/authelia/authelia/releases

But you can have a look at the github milestones, 4.38.0 is in the work and hopefully will be released sooner than later https://github.com/authelia/authelia/milestone/17

Regarding security: a quick browsing in the project's issues, filtering by area:security did not show any flaws being reported since the last release. But there may have been undisclosed vulnerabilities the project's dev are working on fixing for the next version. My personal non-professional non-legally-binding opinion is that it looks fine, so I do keep it running on my server.

morice OP ,
@morice@lemmy.thenewgaming.de avatar

thanks for the insight, i was just worried that the libraries in the container image are outdated and could include some vulnerabilities, but it's alpine based and uses musl which seems hadn't a CVE for a while.

vegetaaaaaaa ,
@vegetaaaaaaa@lemmy.world avatar

i was just worried that the libraries in the container image are outdated

They actually are: trivy scan on authelia/authelia:latest https://pastebin.com/raw/czCYq9BF

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • random
  • selfhosted@lemmy.world
  • test
  • worldmews
  • mews
  • All magazines
    •