[ Vendor · 2 CVEs ]
oauthlib
CVEs affecting oauthlib published in the last 30 days, plus any oauthlib CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-49264 | 13 Oct 2026 | CVSS 6.1 | Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationOAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 0.6.1 until 4.0.0, OAuthLib's RevocationEndpoint in… | Fix |
| CVE-2026-49265 | 13 Oct 2026 | CVSS 6.8 | Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.0.0 until 4.0.0, OAuthLib's PKCE checks in… | Fix |