MEDIUM 6.1 PyPI
PYSEC-2026-188 · CVE-2026-44681, GHSA-r95x-qfjj-fjj2 Modified: 6/3/2026
package
PyPI / authlib
pkg:pypi/authlib
MEDIUM 5.4 PyPI
PYSEC-2026-25 · CVE-2026-41425, GHSA-jj8c-mmj3-mmgv Modified: 5/20/2026
HIGH 7.4 PyPI
GHSA-5357-c2jx-v7qh · CVE-2024-37568, PYSEC-2024-52 Authlib has algorithm confusion with asymmetric public keys
Modified: 11/3/2025
HIGH PyPI
GHSA-7432-952r-cw78 · CVE-2026-28490 Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle
Modified: 4/21/2026
HIGH PyPI
GHSA-7wc2-qxgw-g8gg · CVE-2026-28802 Authlib: Setting `alg: none` and a blank signature appears to bypass signature verification
Modified: 4/21/2026
HIGH 7.5 PyPI
GHSA-9ggr-2464-2j32 · CVE-2025-59420 Authlib: JWS/JWT accepts unknown crit headers (RFC violation → possible authz bypass)
Modified: 2/4/2026
MEDIUM 5.7 PyPI
GHSA-fg6f-75jq-6523 · CVE-2025-68158 Authlib has 1-click Account Takeover vulnerability
Modified: 3/30/2026
MEDIUM 6.5 PyPI
GHSA-g7f3-828f-7h7m · CVE-2025-62706 Authlib : JWE zip=DEF decompression bomb enables DoS
Modified: 2/4/2026
MEDIUM 5.4 PyPI
GHSA-jj8c-mmj3-mmgv · CVE-2026-41425, PYSEC-2026-25 Authlib: Cross-site request forging when using cache
Modified: 6/5/2026
HIGH PyPI
GHSA-m344-f55w-2m6j · CVE-2026-28498 Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding
Modified: 4/21/2026
HIGH 7.5 PyPI
GHSA-pq5p-34cr-23v9 · CVE-2025-61920 Authlib is vulnerable to Denial of Service via Oversized JOSE Segments
Modified: 2/4/2026
MEDIUM 6.1 PyPI
GHSA-r95x-qfjj-fjj2 · CVE-2026-44681, PYSEC-2026-188 Authlib OIDC Implicit/Hybrid Authorization Vulnerable to Open Redirect
Modified: 6/3/2026
MEDIUM 5.4 PyPI
GHSA-w8p2-r796-3vmq · CVE-2026-41479 Authlib OAuth 2.0 has Open Redirect in Authorization API that allows attacker-controlled redirect_uri through unsupported response_type
Modified: 6/8/2026
CRITICAL 9.1 PyPI
GHSA-wvwj-cvrp-7pv5 · CVE-2026-27962 Authlib JWS JWK Header Injection: Signature Verification Bypass
Modified: 4/21/2026
— PyPI
PYSEC-2024-52 · CVE-2024-37568, GHSA-5357-c2jx-v7qh Modified: 6/10/2024