Skip to content
OpenAdvisories

Vendor

authlib

30 known vulnerabilities.

Products

authlib 21 joserfc 9
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-96760 Public exploit

    Authlib library contains a signature‑verification bypass vulnerability

    Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and wit…

    authlib authlib python-authlib python-authlib Debian Ubuntu PyPI