oauthlib vulnerabilities
5 published CVEs name oauthlib among the affected products.
- 5Published CVEs5 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-49272
OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow
oauthlib · oauthlib
High8.5 - CVE-2026-118669
OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client
oauthlib · oauthlib
High8.4 - CVE-2026-49264
OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation
oauthlib · oauthlib
Medium6.1 - CVE-2026-49265
OAuthLib: Timing Attack Vulnerability in PKCE code_verifier Comparison
oauthlib · oauthlib
Medium6.8 - CVE-2022-36087
OAuthLib vulnerable DoS when attacker provides malicious IPV6 URI
oauthlib · oauthlib
Medium5.7