Security update for python-Authlib

This update for python-Authlib fixes the following issues CVE-2026-41425: no CSRF protection on the cache feature in authlib.integrations.starletteclient.OAuth bsc1263114. CVE-2026-44681: unauthenticated open redirect in the OpenIDImplicitGrant and OpenIDHybridGrant authorization endpoints...

python311-Authlib-1.7.2-1.1 on GA media (moderate)

python311-Authlib-1.7.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10883-1 Rating: moderate Cross-References: CVE-2026-44681 CVSS scores: CVE-2026-44681 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...

SUSE CVE-2026-44681

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.12 and 1.7.1, an unauthenticated open redirect in Authlib's OpenIDImplicitGrant and OpenIDHybridGrant authorization endpoint lets a remote attacker cause the authorization server to issue an HTTP 302 to an...

CVE-2026-44681 vulnerabilities

Vulnerabilities for packages: mlflow, airflow...