AAuthlib

Products

Exploited and recent CVEs

• CVE-2026-119284 Medium 6.9 joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection 0.2%
• CVE-2026-119283 High 7.5 joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption 0.2%
• CVE-2026-116672 High 8.8 Authlib RFC 7592 examples omit registration-access-token client binding 0.3%
• CVE-2026-114620 Medium 5.4 Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF 0.4%
• CVE-2026-114619 Medium 4.6 Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokens 0.2%
• CVE-2026-114618 Medium 6.8 Authlib: Default JWT bearer grant accepts assertions for the wrong audience 0.4%
• CVE-2026-114617 Medium 4.2 Authlib: ID token can disable its own nonce validation via the nonce_supported claim 0.3%
• CVE-2026-114616 High 7.4 Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512) 0.3%
• CVE-2026-114615 High 7.4 Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys 0.2%
• CVE-2026-114614 Low 2.6 Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts 0.3%
• CVE-2026-102946 Critical 9.1 joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json 0.1%
• CVE-2026-104056 Critical 9.8 CVE-2026-104056 0.2%
• CVE-2026-96760 Critical 9.8 Authlib library contains a signature‑verification bypass vulnerability 0.4%
• CVE-2026-75509 Medium 6.5 joserfc claim-validation bypass via array-typed single-string claims (iss/sub/jti) 0.1%
• CVE-2026-62995 Low 2.3 joserfc accepts JWT with padding, leading to JWT malleability 0.1%
• CVE-2026-49852 High 8.7 joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363) 0.2%
• CVE-2026-41479 Medium 5.4 Authlib OAuth 2.0 authorization endpoint open redirects to attacker-controlled redirect_uri on unsupported response_type 0.3%
• CVE-2026-48990 Medium 5.3 joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization 0.2%
• CVE-2026-44681 Medium 6.1 Authlib: Open Redirect in Authlib OIDC Implicit/Hybrid Authorization 0.2%
• CVE-2026-41425 Medium 5.4 Authlib: Cross-site request forging when using cache 0.1%
• CVE-2026-28498 Critical 9.1 Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding 0.2%
• CVE-2026-28490 High 8.3 Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle 0.1%
• CVE-2026-27962 Critical 9.1 Authlib JWS JWK Header Injection: Signature Verification Bypass 0.6%
• CVE-2026-28802 Critical 9.1 Authlib: Setting `alg: none` and a blank signature appears to bypass signature verification 0.5%
• CVE-2026-27932 High 7.5 joserfc PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS) 0.5%
• CVE-2025-68158 Medium 5.7 Authlib: 1-click Account Takeover 0.3%
• CVE-2025-65015 Critical 9.2 joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads 0.4%
• CVE-2025-62706 Medium 6.5 Authlib : JWE zip=DEF decompression bomb enables DoS 0.5%
• CVE-2025-61920 High 7.5 Authlib is vulnerable to Denial of Service via Oversized JOSE Segments 0.6%
• CVE-2025-59420 High 7.5 Authlib: JWS/JWT accepts unknown crit headers (RFC violation → possible authz bypass) 0.3%