EUVD-2026-108513

Authlib: issecuretransport loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts...