CVE-2026-57176 social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the Vend OAuth2 backend used only the numeric Vend userid as the social-auth UID. When multiple Vend shops authenticate through the same application, users from different shops with the same internal Ven...