Authlib: OpenID Implicit Grant Checks Raw Scope Instead Of Allowed Scope Before Issuing ID Tokens

Report metadata | Field | Value | | --- | --- | | Package | "authlib" PyPI, "pkg:pypi/authlib" | | Repository | https://github.com/authlib/authlib | | Component | "authlib.oidc.core.grants.implicit.OpenIDImplicitGrant.validateauthorizationrequest" | | Vulnerability class | Authorization bypass: a...