Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

authlib — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in authlib, with AI-generated Chinese analysis, references, and POCs.

Vendor: authlib

CVE ID Title CVSS Severity Published
CVE-2026-104056 CVE-2026-104056 - - 2026-10-01
CVE-2026-96760 Authlib library contains a signature‑verification bypass vulnerability - - 2026-09-28
CVE-2026-41479 Authlib OAuth 2.0 authorization endpoint open redirects to attacker-controlled redirect_uri on unsupported response_type CWE-601 5.4 Medium 2026-06-22
CVE-2026-44681 Authlib: Open Redirect in Authlib OIDC Implicit/Hybrid Authorization CWE-601 6.1 Medium 2026-05-27
CVE-2026-41425 Authlib: Cross-site request forging when using cache CWE-352 5.4 Medium 2026-04-24
CVE-2026-28498 Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding CWE-354 8.2 High 2026-03-16
CVE-2026-28490 Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle CWE-203 - - 2026-03-16
CVE-2026-27962 Authlib JWS JWK Header Injection: Signature Verification Bypass CWE-347 9.1 Critical 2026-03-16
CVE-2026-28802 Authlib: Setting `alg: none` and a blank signature appears to bypass signature verification CWE-347 7.7 High 2026-03-06
CVE-2025-68158 Authlib: 1-click Account Takeover CWE-352 5.7 Medium 2026-01-08
CVE-2025-62706 Authlib : JWE zip=DEF decompression bomb enables DoS CWE-400 6.5 Medium 2025-10-22
CVE-2025-61920 Authlib is vulnerable to Denial of Service via Oversized JOSE Segments CWE-20 7.5 High 2025-10-10
CVE-2025-59420 Authlib: JWS/JWT accepts unknown crit headers (RFC violation → possible authz bypass) CWE-345 7.5 High 2025-09-22

All 13 known CVE vulnerabilities affecting authlib with full Chinese analysis, references, and POCs where available.