IMPORTANT: #Kanidm has released 1.9.4 and 1.10.2 that resolves a CRITICAL security issue. This issue allows any authenticated user to elevate privileges to idm_admin/admin. Details: https://github.com/kanidm/kanidm/security/advisories/GHSA-xxwr-vvr3-2g9f
On a personal note: I'm really sorry this happened - I personally pride myself on the high bar of quality and security that Kanidm provides, and it really hurts to have to make an announcement like this. But we'll learn from this and do better. So thank you all for your trust in this little crab project. It's very appreciated.
@firstyear just learned about the project and the first impression is excellent because security issues are inevitable, the important part is that they are handled properly and with enough care. I do not trust projects that have no history of security issues or CVEs at all, thats always suspicious.