python-social-auth vulnerabilities
10 published CVEs name python-social-auth among the affected products.
- 10Published CVEs10 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-126775
Social-auth-core 4.7.0 before 7.0.0 Login CSRF via SAML RelayState
python-social-auth · social-auth-core
Low2.3 - CVE-2026-115910
Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim
python-social-auth · social-core
Medium6.8 - CVE-2026-62322
Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)
python-social-auth · social-core
Medium6.5 - CVE-2026-57179
social-auth-core has a Session Fixation issue
python-social-auth · social-core
Medium4.2 - CVE-2026-57178
social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing
python-social-auth · social-core
High7.4 - CVE-2026-57177
social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend
python-social-auth · social-core
Medium4.3 - CVE-2026-57176
social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend
python-social-auth · social-core
Medium6.8 - CVE-2026-57175
social-auth-core has an Improper Authentication issue
python-social-auth · social-core
Medium6.4 - CVE-2025-61783
Python Social Auth - Django has unsafe account association
python-social-auth · social-app-django
Medium6.3 - CVE-2024-32879
social-auth-app-django Improper Handling of Case Sensitivity vulnerability
python-social-auth · social-app-django
Medium4.9