zitadel

v4.15.1 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 1mo Secrets & Credentials

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

2fa authentication authorization fido2 fips-140-3 identity

+11 more

Affected surfaces

auth deps

Summary

AI summary

Bug fixes in api, login, and dependency updates were released as version 4.15.1 on 2026-06-08.

Type	Severity	Summary	CVE
Dependency	Low	Update dependencies to latest versions. Update dependencies to latest versions. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix
Bugfix	Medium	Check permission based on provided data on user updates. Check permission based on provided data on user updates. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix	Medium	Apply custom request headers from environment variable in login proxy. Apply custom request headers from environment variable in login proxy. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix	Medium	Redirect to email verification when forced MFA has no visible factors. Redirect to email verification when forced MFA has no visible factors. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix	Medium	Retry session creation after registration when NotFound error occurs. Retry session creation after registration when NotFound error occurs. Source: llm_adapter@2026-06-08 Confidence: high	—

Full changelog

api: check permission based on provided data on user updates (a1748b2)
login: apply custom request headers from environment variable in proxy (#12144) (aad90ce), closes #12125
login: redirect to email verification when forced MFA has no visible factors (#12060) (9618e33), closes #11536
login: retry logic for session creation after registration on NotFound (#12189) (53d6439), closes #12173
update dependencies (#12216) (787886d)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track zitadel

Get notified when new releases ship.

About zitadel

ZITADEL - Identity infrastructure, simplified for you.