Browse CVEs

MEDIUM 5.4 CVE-2026-41479 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.10 and 1.7.1, Authlib's OAuth 2.0 authorization endpoint can … Authlib 1.6.10+ Fix from $1,6002026-06-22 MEDIUM 6.1 CVE-2026-44681 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.12 and 1.7.1, an unauthenticated open redirect in Authlib's O… Authlib 1.6.12+ Fix from $1,6002026-05-27 MEDIUM 5.4 CVE-2026-41425 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authl… Authlib 1.6.11+ Fix from $1,6002026-04-24 CRITICAL 9.1 CVE-2026-27962 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a JWK Header Injection vulnerability in authlib's … Authlib 1.6.9+ Fix from $2,3002026-03-16 HIGH 7.5 CVE-2026-28498 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a library-level vulnerability was identified in th… Authlib 1.6.9+ Fix from $1,9502026-03-16 MEDIUM 6.5 CVE-2026-28490 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a cryptographic padding oracle vulnerability was i… Authlib 1.6.9+ Fix from $1,6002026-03-16 CRITICAL 9.8 CVE-2026-28802 Authlib is a Python library which builds OAuth and OpenID Connect servers. From version 1.6.5 to before version 1.6.7, previous tests involving passi… Authlib 1.6.7+ Fix from $2,3002026-03-06 HIGH 8.8 CVE-2025-68158 Authlib is a Python library which builds OAuth and OpenID Connect servers. In versions 1.0.0 through 1.6.5, cache-backed state/request-token storage … Authlib 1.6.6+ Fix from $1,9502026-01-08 MEDIUM 6.5 CVE-2025-62706 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JWE zip=DEF path performs unbounded DEFL… Authlib 1.6.5+ Fix from $1,6002025-10-22 HIGH 7.5 CVE-2025-61920 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JOSE implementation accepts unbounded JW… Authlib 1.6.5+ Fix from $1,9502025-10-10 HIGH 7.5 CVE-2025-59420 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.4, Authlib’s JWS verification accepts tokens that dec… Authlib 1.6.4+ Fix from $1,9502025-09-22 HIGH 7.5 CVE-2024-37568 lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. Unless an algorithm is specified in a jwt.decode call, HMAC verific… Authlib 1.3.1+ Fix from $1,9502024-06-09