Security

CVE-2025-29787

Rauthy itself has not been vulnerable, but he zip dependency pulled in by the Swagger UI as a 3rd party dependency has
been vulnerable when reading files. zip inside the Swagger UI has only been used at build time, never at runtime.
However, the version has been bumped to a non-vulnerable one.

CVE-2025-29787

#785

Changes

Updated Translations

zh and ko translations have received updates. ko is now also available for the Admin UI and has been added to the
FILTER_LANG_ADMIN value from the 0.28.0 release.

#769
#775

Bugfix

• UI: Fixed and updated some translations to make them more clear
  #779
  #783
• UI: The Allow Insecure TLS checkbox for upstream auth providers has been shown twice in some situations.
  #780
• UI: The Invalid Input message has not been reset in some views and situations.
  #781