Vulnerability index

Browse CVEs

12 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Authlib MEDIUM 5.4
CVE-2026-41479

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.10 and 1.7.1, Authlib's OAuth 2.0 authorization endpoint can …

Fix: 1.6.10+
Fix from $1,600 2026-06-22
Authlib MEDIUM 6.1
CVE-2026-44681

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.12 and 1.7.1, an unauthenticated open redirect in Authlib's O…

Fix: 1.6.12+
Fix from $1,600 2026-05-27
Authlib MEDIUM 5.4
CVE-2026-41425

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authl…

Fix: 1.6.11+
Fix from $1,600 2026-04-24
Authlib CRITICAL 9.1
CVE-2026-27962

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a JWK Header Injection vulnerability in authlib's …

Fix: 1.6.9+
Fix from $2,300 2026-03-16
Authlib HIGH 7.5
CVE-2026-28498

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a library-level vulnerability was identified in th…

Fix: 1.6.9+
Fix from $1,950 2026-03-16
Authlib MEDIUM 6.5
CVE-2026-28490

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a cryptographic padding oracle vulnerability was i…

Fix: 1.6.9+
Fix from $1,600 2026-03-16
Authlib CRITICAL 9.8
CVE-2026-28802

Authlib is a Python library which builds OAuth and OpenID Connect servers. From version 1.6.5 to before version 1.6.7, previous tests involving passi…

Fix: 1.6.7+
Fix from $2,300 2026-03-06
Authlib HIGH 8.8
CVE-2025-68158

Authlib is a Python library which builds OAuth and OpenID Connect servers. In versions 1.0.0 through 1.6.5, cache-backed state/request-token storage …

Fix: 1.6.6+
Fix from $1,950 2026-01-08
Authlib MEDIUM 6.5
CVE-2025-62706

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JWE zip=DEF path performs unbounded DEFL…

Fix: 1.6.5+
Fix from $1,600 2025-10-22
Authlib HIGH 7.5
CVE-2025-61920

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JOSE implementation accepts unbounded JW…

Fix: 1.6.5+
Fix from $1,950 2025-10-10
Authlib HIGH 7.5
CVE-2025-59420

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.4, Authlib’s JWS verification accepts tokens that dec…

Fix: 1.6.4+
Fix from $1,950 2025-09-22
Authlib HIGH 7.5
CVE-2024-37568

lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. Unless an algorithm is specified in a jwt.decode call, HMAC verific…

Fix: 1.3.1+
Fix from $1,950 2024-06-09