The Ory Changelog

Ory Network Ory Kratos Ory Keto Ory Oathkeeper Ory Elements Ory Enterprise License

Ory Network, Ory Hydra, Ory Kratos, Ory Keto, Ory Oathkeeper, Ory Elements v26.2.5 released

Ory Network, Ory Kratos, Ory Hydra, Ory Keto, Ory Oathkeeper Fix shared mutable state in error handling Error globals such as herodot.ErrNotFound were...

April 21, 2026

Ory Network Ory Hydra Ory Kratos Ory Keto Ory Oathkeeper Ory Elements Ory Enterprise License

Ory Network, Ory Hydra, Ory Kratos, Ory Keto, Ory Oathkeeper, Ory Elements v26.2.4 released

Ory Network Add break-glass account recovery for organization identities Organization members can now be designated for break-glass account recovery. These...

April 15, 2026

Ory Network Ory Kratos Ory Enterprise License

Ory Network, Ory Kratos v26.2.2 released

Ory Network, Ory Kratos Phone number verification with SMS code You can now verify phone numbers through the standalone verification flow, not just as a side...

April 1, 2026

Ory Network Ory Hydra Ory Kratos Ory Enterprise License

Ory Network, Ory Hydra, Ory Kratos v26.2.1 released

Ory Network Fix identity disabled error handling during self-service flows Previously, when attempting to recover or login as an identity that had been...

March 25, 2026

Ory Hydra Ory Kratos Ory Keto Ory Oathkeeper Ory Polis Ory Enterprise License

Security Advisory: Ory Kratos, Hydra, Keto, Oathkeeper, Polis v26.2.0

Ory Kratos SQL injection via forged pagination tokens (CVE-2026-33503, High) The ListCourierMessages Admin API is vulnerable to SQL injection through forged...

March 20, 2026

Ory Network Ory Kratos Ory Oathkeeper Ory Enterprise License

Ory Network, Ory Kratos, Ory Oathkeeper, Ory Elements v26.2.0 released

Ory Network Automatic account linking for Google and Apple providers You can now enable automatic account linking for Google and Apple social sign-in...

March 20, 2026