All 5 CVE vulnerabilities found in social-core, with AI-generated Chinese analysis, references, and POCs.
Vendor: python-social-auth
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-57179 | social-auth-core has a Session Fixation issue CWE-384 | 4.2 | Medium | 2026-09-24 |
| CVE-2026-57178 | social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing CWE-287 | 7.4 | High | 2026-09-24 |
| CVE-2026-57177 | social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend CWE-352 | 4.3 | Medium | 2026-09-24 |
| CVE-2026-57176 | social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend CWE-289 | 6.8 | Medium | 2026-09-24 |
| CVE-2026-57175 | social-auth-core has an Improper Authentication issue CWE-287 | 6.4 | Medium | 2026-09-24 |
All 5 known CVE vulnerabilities affecting social-core with full Chinese analysis, references, and POCs where available.