authlib
The ultimate Python library in building OAuth and OpenID Connect servers and clients.
Security Advisories for authlib in pypi
Moderate
2 months ago
Authlib OAuth 2.0 has Open Redirect in Authorization API that allows attacker-controlled redirect_uri through unsupported response_type
pypi
authlib
Moderate
3 months ago
Authlib OIDC Implicit/Hybrid Authorization Vulnerable to Open Redirect
pypi
authlib
High
5 months ago
Authlib: Setting `alg: none` and a blank signature appears to bypass signature verification
pypi
authlib
High
10 months ago
Authlib is vulnerable to Denial of Service via Oversized JOSE Segments
pypi
authlib
High
11 months ago
Authlib: JWS/JWT accepts unknown crit headers (RFC violation → possible authz bypass)
pypi
authlib