See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202653
What's Changed
- website/docs: 2026.5.2 release notes (cherry-pick #22721 to version-2026.5) by @authentik-automation[bot] in #22736
- website/docs: 2026.2.4 release notes (cherry-pick #22720 to version-2026.5) by @authentik-automation[bot] in #22738
- website/docs: 2025.12.6 release notes (cherry-pick #22719 to version-2026.5) by @authentik-automation[bot] in #22741
- website/docs: update endpoint SSH docs (cherry-pick #22759 to version-2026.5) by @authentik-automation[bot] in #22793
- tests/e2e: fix proxy tests failing due to in-use port (cherry-pick #22785 to version-2026.5) by @authentik-automation[bot] in #22792
- enterprise/providers/scim: fix interactive OAuth overriding refresh_token (cherry-pick #22858 to version-2026.5) by @authentik-automation[bot] in #22861
- website/docs: mark cves CVE-2026-49443 and CVE-2026-49448 (cherry-pick #22808 to version-2026.5) by @authentik-automation[bot] in #22864
- website/docs: add oidc issuer information (cherry-pick #22556 to version-2026.5) by @authentik-automation[bot] in #22800
- website/docs: update binding wizard labels (cherry-pick #22869 to version-2026.5) by @authentik-automation[bot] in #22872
- web/admin: fix Docker outpost integration form CA Cert filter (cherry-pick #22863 to version-2026.5) by @authentik-automation[bot] in #22895
- blueprints: handle integrity exception when applying blueprints (cherry-pick #22599 to version-2026.5) by @authentik-automation[bot] in #22927
- website/docs: clean up proxy provider docs (cherry-pick #22870 to version-2026.5) by @authentik-automation[bot] in #22890
- endpoints/connectors/agent: fix exception with invalid auth type (cherry-pick #22943 to version-2026.5) by @authentik-automation[bot] in #22951
- providers/radius: fix panic in log due to type (cherry-pick #22965 to version-2026.5) by @authentik-automation[bot] in #22967
- website: fix package-lock.json (version-2026.5) by @PeshekDotDev in #22964
- web/polyfill: polyfill customElements.getName for Safari < 17.4 (cherry-pick #22940 to version-2026.5) by @authentik-automation[bot] in #22963
- core: bump django from 5.2.14 to v5.2.15 (cherry-pick #22956 to version-2026.5) by @authentik-automation[bot] in #22962
- providers/oauth: skip post logout redirect matching if none are saved on the provider (cherry-pick #22718 to version-2026.5) by @authentik-automation[bot] in #22955
- website/docs: add release notes for 2026.5.3 (cherry-pick #22976 to version-2026.5) by @authentik-automation[bot] in #22978
Full Changelog: version/2026.5.2...version/2026.5.3