Browse all 7 CVE security advisories affecting python-social-auth. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-57179 | social-auth-core has a Session Fixation issue — social-core CWE-384 | 4.2 | Medium | 2026-09-24 |
| CVE-2026-57178 | social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing — social-core CWE-287 | 7.4 | High | 2026-09-24 |
| CVE-2026-57177 | social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend — social-core CWE-352 | 4.3 | Medium | 2026-09-24 |
| CVE-2026-57176 | social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend — social-core CWE-289 | 6.8 | Medium | 2026-09-24 |
| CVE-2026-57175 | social-auth-core has an Improper Authentication issue — social-core CWE-287 | 6.4 | Medium | 2026-09-24 |
| CVE-2025-61783 | Python Social Auth - Django has unsafe account association — social-app-django CWE-303 | 9.1AI | Critical AI | 2025-10-09 |
| CVE-2024-32879 | social-auth-app-django Improper Handling of Case Sensitivity vulnerability — social-app-django CWE-178 | 4.9 | Medium | 2024-04-24 |
This page lists every published CVE security advisory associated with python-social-auth. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.