1865 matches found
Insertion of Sensitive Information Into Sent Data
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in the oidc/saml login flows. An attacker can access sensitive information by sending crafted requests to the exposed interface. Remediation Upgrade...
CVE-2025-61920
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JOSE implementation accepts unbounded JWS/JWT header and signature segments. A remote attacker can craft a token whose base64url‑encoded header or signature spans hundreds of megabytes...
EUVD-2025-33768
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JOSE implementation accepts unbounded JWS/JWT header and signature segments. A remote attacker can craft a token whose base64url‑encoded header or signature spans hundreds of megabytes...
CVE-2025-61920
CVE-2025-61920 — Authlib (Python) Authlib’s JOSE implementation (prior to v1.6.5) accepts unbounded JWS/JWT header and signature segments. A remote attacker can craft a token whose base64url header or signature spans hundreds of megabytes. During verification, the library decodes and parses the f...
EUVD-2019-6842
Malware in sbrugna...
EUVD-2019-13762
Malware in sbrugna...
EUVD-2021-25579
Malware in sbrugna...
EUVD-2021-2551
Malware in sbrugna...
EUVD-2021-19554
Malware in sbrugna...
EUVD-2021-0921
Malware in sbrugna...
EUVD-2019-0393
Malware in sbrugna...
EUVD-2018-12430
Malware in sbrugna...
EUVD-2021-0993
Malware in sbrugna...
EUVD-2016-4115
Malware in sbrugna...
EUVD-2017-14079
Malware in sbrugna...
EUVD-2017-10167
Malware in sbrugna...
EUVD-2021-19548
Malware in sbrugna...
EUVD-2021-19555
Malware in sbrugna...