MEDIUM5.4
PYSEC-2026-25
Quick fix
PYSEC-2026-25 — authlib: upgrade to the fixed version with the command below.
pip install --upgrade 'authlib>=1.6.11'Details
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.starlette_client.OAuth. This vulnerability is fixed in 1.6.11.
Are you affected?
Enter the version of the package you're using.