The Ory Changelog

Ory Hydra Ory Kratos Ory Keto Ory Oathkeeper Ory Polis Ory Enterprise License

Security Advisory: Ory Kratos, Hydra, Keto, Oathkeeper, Polis v26.2.0

Ory Kratos SQL injection via forged pagination tokens (CVE-2026-33503, High) The ListCourierMessages Admin API is vulnerable to SQL injection through forged...

March 20, 2026

Ory Network Ory Kratos Ory Oathkeeper Ory Enterprise License

Ory Network, Ory Kratos, Ory Oathkeeper, Ory Elements v26.2.0 released

Ory Network Automatic account linking for Google and Apple providers You can now enable automatic account linking for Google and Apple social sign-in...

March 20, 2026

Ory Network Ory Kratos

Ory Network, Ory Kratos v26.1.17 released

Ory Network Add UAE PASS as a social sign-in provider Adds support for UAE PASS authentication, the UAE’s official digital identity platform. Supports both...

March 16, 2026

Ory Network Ory Kratos Ory Oathkeeper

Ory Network, Ory Kratos, Ory Oathkeeper v26.1.16 released

Ory Network, Ory Kratos Breaking change: Self-service flows now return UI errors for disabled identities The login and registration flows now return a UI...

March 11, 2026

Ory Network Ory Kratos

Ory Network, Ory Kratos v26.1.13 released

Ory Network Passkey support for API flows Ory Network now supports passkey registration, login, and settings management through API flows. This enables...

February 26, 2026

Ory Network Ory Hydra Ory Kratos Ory Keto

Ory Network, Ory Hydra, Ory Kratos, Ory Keto v26.1.11 released + Terraform Provider

Ory Network SAML certificate expiry date available in provider config The provider configuration now includes the SAML certificate expiry date, enabling...

February 24, 2026

Ory Hydra Ory Polis

Ory Hydra, Ory Polis v26.1.7 released

Ory Hydra Optimized SQL migrations for PostgreSQL We have improved SQL migrations for PostgreSQL in Ory Hydra when upgrading from Open Source release v2.2.0...

February 10, 2026

Ory Network Ory Kratos Ory Elements

Ory Network, Ory Kratos, Ory Elements v26.1.6 released

Ory Network Proper validation message for invalid email addresses and phone numbers Kratos’ APIs will now return more user-friendly validation messages when...

February 9, 2026

Ory Network Ory Hydra Ory Kratos Ory Polis

Ory v25.4.3 through v26.1.3 released

Ory Network The following improvements are now available in Ory Network. Advanced full-text identity search for multi-region projects Advanced identity...

January 27, 2026

Ory Network Ory Hydra Ory Keto

Ory Hydra/Ory Keto/Ory Network v25.4.3 released

Ory Hydra Stateless JWT Access Token Feature Flag Ory Hydra introduces feature flags strategies.jwt.stateless.enabled and strategies.jwt.stateless.claim_name...

December 5, 2025