authlib-gino (>=0.1.0, <=0.3.0), cnmcclient (0.4.3) +14 more potentially affected by CVE-2025-62706 via authlib (0.14.3)

authlib PYPI version 0.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - authlib-gino =0.1.0, =0.1.2, =0.4.0, =0.1.2, =1.0.0b7, =0.2.0, =1.0.0, =7.0.8.dev28841, =3.5.6.dev19088, =5.1.1.dev24106 and more Source cves:...

authutils (5.0.3) potentially affected by CVE-2025-62706 via authlib (0.14.2)

authlib PYPI version 0.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - authutils 5.0.3 Source cves: CVE-2025-62706 Source advisory: OSV:PYSEC-2026-1202...

bastion-key-client (>=1.0.1, <=1.4.0), fabric-am-handlers (>=0.11.0, <=1.4.0b2) +5 more potentially affected by CVE-2025-62706 via authlib (0.15.2)

authlib PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - bastion-key-client =1.0.1, =0.11.0, =0.14.0, =0.4.0, =0.9.0, =1.0.0b1, =1.0.0 Source cves: CVE-2025-62706 Source advisory: OSV:PYSEC-2026-1202...

lumapps-sdk (>=1.0.0b13, <=1.0.0b18) potentially affected by CVE-2025-62706 via authlib (0.14.1)

authlib PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - lumapps-sdk =1.0.0b13, =1.0.0b18 Source cves: CVE-2025-62706 Source advisory: OSV:PYSEC-2026-1202...

ROOT-APP-PYPI-CVE-2025-62706 CVE-2025-62706 in rootio-Authlib - Patched by Root

Root has patched CVE-2025-62706 in the rootio-Authlib package for Root:PyPI. Multiple fixed versions available...

CVE-2025-62706 vulnerabilities

Vulnerabilities for packages: mlflow...

CVE-2025-62706 vulnerabilities

Vulnerabilities for packages: mlflow...

SUSE-SU-2025:3842-1 Security update for python-Authlib

This update for python-Authlib fixes the following issues: - CVE-2025-62706: fixed a denial of service condition bsc1252504, ghauthlib/authlib@e0863d512931...

Linux Distros Unpatched Vulnerability : CVE-2025-62706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib's JWE zip=DEF path performs unbounded DEFLATE...

CVE-2025-62706

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JWE zip=DEF path performs unbounded DEFLATE decompression. A very small ciphertext can expand into tens or hundreds of megabytes on decrypt, allowing an attacker who can supply decryptable...

molten-jwt (0.3.0) potentially affected by CVE-2025-62706 via authlib (0.12.1)

authlib PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - molten-jwt 0.3.0 Source cves: CVE-2025-62706 Source advisory: OSV:GHSA-G7F3-828F-7H7M...

aad-fastapi-dl37 (>=1.0.0, <=1.0.2), agentstack-cli (>=0.4.0rc1, <=0.4.3) +159 more potentially affected by CVE-2025-62706 via authlib (>=1.0.0b2, <=1.6.4)

authlib PYPI version =1.0.0b2, =1.0.0, =0.4.0rc1, =0.1.0, =1.3.0a20250904, =1.2.0a20250730, =1.2.0a20250730, =0.0.0, =1.7.0, =0.0.1, =0.1.0, =1.0.3, =2.0.0, =0.16.0, =0.33.0, =0.43.0 and more Source cves: CVE-2025-62706 Source advisory: SNYK:PYTHON-AUTHLIB-13535082...