Skip to content
OpenAdvisories
Medium USN-5632-1 1 CVE

python-oauthlib vulnerability

Published Sep 22, 2022 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Sebastian Chnelik discovered that OAuthLib incorrectly handled certain
redirect uris. A remote attacker could possibly use this issue to cause
OAuthLib to crash, resulting in a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS python-oauthlib 3.2.0-1ubuntu0.1

Vulnerabilities 1

  • Medium 5.7
    CVE-2022-36087

    OAuthLib vulnerable DoS when attacker provides malicious IPV6 URI

    OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions…

    oauthlib oauthlib python-oauthlib oauthlib Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2022-36087