CVE-2026-118669

OAuthLib , a Python 3.6+ OAuth request-signing implementation, is vulnerable to an authorization bypass in versions prior to 4.0.0 . The client_credentials and Resource Owner Password Credentials token grant handlers can authenticate request.client as one confidential client while incorrectly ret...