The vulnerability of the OpenIDImplicitGrant and OpenIDHybridGrant endpoints of the Authlib library for OAuth and OpenID Connect servers allows a hacker to redirect a user to any arbitrary URL address.

The vulnerability of the OpenIDImplicitGrant and OpenIDHybridGrant endpoints of the Authlib library for OAuth and OpenID Connect servers involves redirecting users to an unreliable website. Exploiting this vulnerability could allow a malicious actor to redirect users to any given URL address...