400 matches found
The vulnerability of the OpenIDImplicitGrant and OpenIDHybridGrant endpoints of the Authlib library for OAuth and OpenID Connect servers allows a hacker to redirect a user to any arbitrary URL address.
The vulnerability of the OpenIDImplicitGrant and OpenIDHybridGrant endpoints of the Authlib library for OAuth and OpenID Connect servers involves redirecting users to an unreliable website. Exploiting this vulnerability could allow a malicious actor to redirect users to any given URL address...
SUSE SLED15 / SLES15 Security Update : python-Authlib (SUSE-SU-2026:4111-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4111-1 advisory. This update for python-Authlib fixes the following issue: - CVE-2026-41479: crafted authorization requests with...
Security update for python-Authlib
This update for python-Authlib fixes the following issue: CVE-2026-41479: crafted authorization requests with unsupported responsetypes can cause unauthenticated open redirects bsc1275231. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
SUSE-SU-2026:4111-1 Security update for python-Authlib
This update for python-Authlib fixes the following issue: - CVE-2026-41479: crafted authorization requests with unsupported responsetypes can cause unauthenticated open redirects bsc1275231...
openSUSE 16 Security Update : python-Authlib (openSUSE-SU-2026:21795-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21795-1 advisory. Changes in python-Authlib: - CVE-2026-41479: Open Redirect vulnerability via crafted authorization requests bsc1275231 Tenable has extracted the precedi...
Security update for python-Authlib (moderate)
openSUSE security update: security update for python-authlib ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21795-1 Rating: moderate References: bsc1275231 Cross-References: CVE-2026-41479 CVSS scores: CVE-2026-41479 SUSE : 5.4...
OPENSUSE-SU-2026:21795-1 Security update for python-Authlib
This update for python-Authlib fixes the following issues: Changes in python-Authlib: - CVE-2026-41479: Open Redirect vulnerability via crafted authorization requests bsc1275231...
python313-Authlib-1.7.2-3.1 on GA media (moderate)
python313-Authlib-1.7.2-3.1 on GA media Announcement ID: openSUSE-SU-2026:11614-1 Rating: moderate Cross-References: CVE-2024-37568 CVSS scores: CVE-2024-37568 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...
OPENSUSE-SU-2026:11614-1 python313-Authlib-1.7.2-3.1 on GA media
These are all security issues fixed in the python313-Authlib-1.7.2-3.1 package on the GA media of openSUSE Tumbleweed...
SUSE CVE-2026-41479
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.10 and 1.7.1, Authlib's OAuth 2.0 authorization endpoint can be turned into an unauthenticated open redirect when a request uses an unsupported responsetype and supplies an attacker-controlled redirecturi. The...
CVE-2026-41479
A flaw was found in Authlib, a Python library for building OAuth and OpenID Connect servers. A remote attacker can exploit the OAuth 2.0 authorization endpoint by providing an unsupported response type and a malicious redirect Uniform Resource Identifier URI. This allows the attacker to redirect...
ROS-20260810-73-0036
The vulnerability in python-authlib relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses...
ROS-20260810-73-0037
The vulnerability in python-authlib relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses...
ROS-20260810-73-0035
The vulnerability in python-authlib is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
ROOT-APP-PYPI-CVE-2026-41479 CVE-2026-41479 in Authlib - Patched by Root
Root has patched CVE-2026-41479 in the Authlib package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-44681 CVE-2026-44681 in Authlib - Patched by Root
Root has patched CVE-2026-44681 in the Authlib package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-28802 CVE-2026-28802 in Authlib - Patched by Root
Root has patched CVE-2026-28802 in the Authlib package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-28498 CVE-2026-28498 in Authlib - Patched by Root
Root has patched CVE-2026-28498 in the Authlib package for Root:PyPI. Multiple fixed versions available...