This release fixes issues for SREs watching stability and regressions.
Published 1mo
Secrets & Credentials
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
2fa
authentication
authorization
fido2
fips-140-3
identity
+11 more
login
mfa
multitenancy
oauth2
oidc
openid-connect
passkeys
saml
scim
sso
user
Affected surfaces
auth
rbac
Summary
AI summaryUpdates Bug Fixes, 4.15.3, and 2026-06-22 across a mixed release.
Full changelog
4.15.3 (2026-06-22)
Bug Fixes
- added client and scope validation for token exchange (e2886a6)
- ensure external user's email is verified before auto-linking (c97012f)
- login: center text for generic IDP buttons without icons (#12211) (aadc664), closes #12182
- login: guard defaultRedirectUri in OIDC/SAML FailedPrecondition paths (0382659)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Beta — feedback welcome: [email protected]