python-social-auth social-core vulnerabilities
7 published CVEs name python-social-auth social-core among the affected products.
- 7Published CVEs7 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-115910
Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim
python-social-auth · social-core
Medium6.8 - CVE-2026-62322
Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)
python-social-auth · social-core
Medium6.5 - CVE-2026-57179
social-auth-core has a Session Fixation issue
python-social-auth · social-core
Medium4.2 - CVE-2026-57178
social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing
python-social-auth · social-core
High7.4 - CVE-2026-57177
social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend
python-social-auth · social-core
Medium4.3 - CVE-2026-57176
social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend
python-social-auth · social-core
Medium6.8 - CVE-2026-57175
social-auth-core has an Improper Authentication issue
python-social-auth · social-core
Medium6.4