Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

<@U03DJ6Q0EUE> thought there was value in mentioning here for :eyes:  - We've been able to get steps to reproduce this issue - <https://github.com/ory/kratos/issues/3289> - Looks like a potential regression of <https://github.com/ory/kratos/pull/1357>

You're quicker than me, saw you've already responded :raised_hands:

I'll keep an eye on the issue, if we can provide anymore info to help troubleshoot, let me know!

<https://github.com/ory/kratos/pull/3330>

What's the release process for new versions <@U03DJ6Q0EUE> - Notice Kratos hasn't had a new version since April. Is it possible to roll a new one with that fix you merged?

It'll land on Ory Network this week. Not sure about the time frame of OSS releases. <@U010F2N7G2X> do you have plans for a Kratos release?

Probably in July as the quarterly release is due

Thanks both!  Will keep an eye out for the July release. We've put in a fix for this on our side in the mean time, simply sanitising emails before we send to Kratos, so no rush from us now