Authentication Bypass by Alternate Name

Overview social-auth-core is a package that makes Python social authentication simple. Affected versions of this package are vulnerable to Authentication Bypass by Alternate Name via the getuserid method in the Vend OAuth2 backend socialcore/backends/vend.py, where user identifiers are scoped onl...

PT-2026-39715

Name of the Vulnerable Software and Affected Versions Inbox Zero versions prior to 2.29.3 Description The cleaner email stream endpoint used a shared Redis subscription listener. This configuration could result in thread events for one authenticated account being delivered to another authenticate...