Changelog for Ory Kratos OEL

2025-06-11

Tag: 290abca8469dc46c1ba07708849fed28fdbc1b69

Make code submission attempt limit configurable

Previously the maximum number of submission attempts for codes (e.g., 2FA codes, email verification codes) was set to 5 in Ory Kratos. This release allows the submission attempts to be configurable for system administrators based on specific security policies or business requirements, the default value of 5 remains. To find out more how to configure it please read our documentation https://www.ory.sh/docs/identities/sign-in/code-submission-limit

2025-05-27

Initial Ory Kratos OEL release

Changes:

• fix high security vulnerability CVE-2025-22871

No specific upgrade steps are required for this release. The Ory Kratos OEL image is now available in the Ory Enterprise Docker Registry.