Skip to content
OpenAdvisories

Package · Azure Linux

python-oauthlib

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-49264

    OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation

    OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 0.6.1 until 4.0.0, OAuthLib's RevocationEndpoint in oauthlib/oauth2/rfc6749/endpoints/revocation.py reflects an unvalidated callback request parameter into success and erro…

    oauthlib oauthlib open-webui katib-earlystopping Debian Ubuntu Azure Linux Wolfi PyPI
  • Medium 6.8
    CVE-2026-49265

    OAuthLib: Timing Attack Vulnerability in PKCE code_verifier Comparison

    OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.0.0 until 4.0.0, OAuthLib's PKCE checks in oauthlib/oauth2/rfc6749/grant_types/authorization_code.py compare attacker-supplied code_verifier values with stored challenges…

    oauthlib oauthlib open-webui katib-earlystopping Debian Ubuntu Azure Linux Wolfi PyPI