Authentication Bypass by Alternate Name

Overview social-auth-core is a package that makes Python social authentication simple. Affected versions of this package are vulnerable to Authentication Bypass by Alternate Name via the getuserid method in the Vend OAuth2 backend socialcore/backends/vend.py, where user identifiers are scoped onl...