Skip to content
OpenAdvisories

Package · Debian

python-authlib

22 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Clear filters · Feed

  • Low 2.6
    CVE-2026-114614

    Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts

    Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.is_secure_transport() uses a textual prefix comparison for loopback HTTP exemptions, so a URL whose userinfo begins with a loopback host …

    authlib authlib python-authlib python-authlib Debian Ubuntu PyPI