—PyPI
PYSEC-2022-269· CVE-2022-36087, GHSA-3pgj-pg6c-r5p7Modified: 11/8/2023
package
PyPI/oauthlib
pkg:pypi/oauthlib
MEDIUM5.7PyPI
GHSA-3pgj-pg6c-r5p7· CVE-2022-36087, PYSEC-2022-269OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI
Modified: 10/7/2024
MEDIUM6.1PyPI
GHSA-hj66-6f7g-4r5v· CVE-2026-49264Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation
Modified: 9/29/2026
MEDIUM6.8PyPI
GHSA-xpv3-w29h-x7cv· CVE-2026-49265Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)
Modified: 9/29/2026