security: fix CVE-2024-42490 (cherry-pick #11022)

[gcp-cherry-pick-bot]

Cherry-picked security: fix CVE-2024-42490 (#11022)

CVE-2024-42490

Signed-off-by: Jens Langhammer jens@goauthentik.io

[netlify]

✅ Deploy Preview for authentik-docs ready!

Name	Link
🔨 Latest commit	b82ece9
🔍 Latest deploy log	https://app.netlify.com/sites/authentik-docs/deploys/66c7567ddce20b00082437d2
😎 Deploy Preview	https://deploy-preview-11024--authentik-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[codecov]

Codecov Report

Attention: Patch coverage is 31.03448% with 20 lines in your changes missing coverage. Please review.

Project coverage is 51.92%. Comparing base (be3d7c0) to head (b82ece9).
Report is 2 commits behind head on version-2024.4.

Files	Patch %	Lines
authentik/crypto/tests.py	0.00%	20 Missing ⚠️

❗ There is a different number of reports uploaded between BASE (be3d7c0) and HEAD (b82ece9). Click for more details.

HEAD has 4 uploads less than BASE

Flag	BASE (be3d7c0)	HEAD (b82ece9)
e2e	8	7
unit	3	0

Additional details and impacted files

@@                 Coverage Diff                 @@
##           version-2024.4   #11024       +/-   ##
===================================================
- Coverage           92.54%   51.92%   -40.62%     
===================================================
  Files                 669      669               
  Lines               32943    32967       +24     
===================================================
- Hits                30486    17119    -13367     
- Misses               2457    15848    +13391     

Flag	Coverage Δ
e2e	50.48% <31.03%> (-0.04%)	⬇️
integration	25.87% <6.89%> (-0.02%)	⬇️
unit	?

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.