919 matches found
Authlib OpenID Implicit Grant Hybrid Grant Redirection
The vulnerability of the OpenIDImplicitGrant and OpenIDHybridGrant endpoints of the Authlib library for OAuth and OpenID Connect servers involves redirecting users to an unreliable website. Exploiting this vulnerability could allow a malicious actor to redirect users to any given URL address...
Authlib OAuth CSRF
The vulnerability of the OAuth authentication component for web applications based on the Starlette library, provided by the Authlib library for OAuth and OpenID Connect servers, is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to...
SUSE SLED15 / SLES15 Security Update : python-Authlib (SUSE-SU-2026:4111-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4111-1 advisory. This update for python-Authlib fixes the following issue: - CVE-2026-41479: crafted authorization requests with...
Security update for python-Authlib
This update for python-Authlib fixes the following issue: CVE-2026-41479: crafted authorization requests with unsupported responsetypes can cause unauthenticated open redirects bsc1275231. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
SUSE-SU-2026:4111-1 Security update for python-Authlib
This update for python-Authlib fixes the following issue: - CVE-2026-41479: crafted authorization requests with unsupported responsetypes can cause unauthenticated open redirects bsc1275231...
openSUSE 16 Security Update : python-Authlib (openSUSE-SU-2026:21795-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21795-1 advisory. Changes in python-Authlib: - CVE-2026-41479: Open Redirect vulnerability via crafted authorization requests bsc1275231 Tenable has extracted the precedi...
Security update for python-Authlib (moderate)
openSUSE security update: security update for python-authlib ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21795-1 Rating: moderate References: bsc1275231 Cross-References: CVE-2026-41479 CVSS scores: CVE-2026-41479 SUSE : 5.4...
OPENSUSE-SU-2026:21795-1 Security update for python-Authlib
This update for python-Authlib fixes the following issues: Changes in python-Authlib: - CVE-2026-41479: Open Redirect vulnerability via crafted authorization requests bsc1275231...
python313-Authlib-1.7.2-3.1 on GA media (moderate)
python313-Authlib-1.7.2-3.1 on GA media Announcement ID: openSUSE-SU-2026:11614-1 Rating: moderate Cross-References: CVE-2024-37568 CVSS scores: CVE-2024-37568 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...
OPENSUSE-SU-2026:11614-1 python313-Authlib-1.7.2-3.1 on GA media
These are all security issues fixed in the python313-Authlib-1.7.2-3.1 package on the GA media of openSUSE Tumbleweed...
SUSE CVE-2026-41479
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.10 and 1.7.1, Authlib's OAuth 2.0 authorization endpoint can be turned into an unauthenticated open redirect when a request uses an unsupported responsetype and supplies an attacker-controlled redirecturi. The...
CVE-2026-41479
A flaw was found in Authlib, a Python library for building OAuth and OpenID Connect servers. A remote attacker can exploit the OAuth 2.0 authorization endpoint by providing an unsupported response type and a malicious redirect Uniform Resource Identifier URI. This allows the attacker to redirect...
ROS-20260810-73-0036
The vulnerability in python-authlib relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses...
ROS-20260810-73-0037
The vulnerability in python-authlib relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses...
ROS-20260810-73-0035
The vulnerability in python-authlib is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
ROOT-APP-PYPI-CVE-2026-44681 CVE-2026-44681 in Authlib - Patched by Root
Root has patched CVE-2026-44681 in the Authlib package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-41479 CVE-2026-41479 in Authlib - Patched by Root
Root has patched CVE-2026-41479 in the Authlib package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-28490 CVE-2026-28490 in Authlib - Patched by Root
Root has patched CVE-2026-28490 in the Authlib package for Root:PyPI. Multiple fixed versions available...