Skip to content
OpenAdvisories

Product · python-social-auth

social-auth-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.2
    CVE-2026-126775

    Social-auth-core 4.7.0 before 7.0.0 Login CSRF via SAML RelayState

    Social-auth-core 4.7.0 before 7.0.0 contains a login cross-site request forgery vulnerability in the SAML backend that restores sessions named in the unsigned RelayState parameter. Attackers can deliver their own valid IdP response and RelayState to a victim'…

    python-social-auth social-auth-core