Skip to content
OpenAdvisories

Vendor

oauthlib

5 known vulnerabilities.

Products

oauthlib 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2026-118669 Public exploit

    OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client

    OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the client_credentials and Resource Owner Password Credentials token grant handlers can authenticate request.client as one confidential client while retaining an…

    oauthlib oauthlib python-oauthlib oauthlib Debian Ubuntu PyPI