CVE-2026-114619

The Authlib Python library, used for building OAuth and OpenID Connect servers, contains a vulnerability in the OpenIDImplicitGrant.validate_authorization_request() function. Prior to version 1.9.0 , the system incorrectly validates the client-controlled raw request.payload.scope instead of the f...