Known vulnerabilities in python-authlib (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
python-authlib (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:python-authlib_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
9
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
0.15.5-1ubuntu0.1~esm2
1.3.0-1ubuntu0.1~esm2
1.6.7-1ubuntu0.1~esm1
0.15.5-1ubuntu0.1~esm1
1.3.0-1ubuntu0.1~esm1
1.6.0-1
1.5.2-1
1.5.0-1
1.5.1-1
1.4.1-1
1.4.0-1
1.3.2-2
1.3.2-1
1.3.1-1
1.3.0-2
1.3.0-3
1.3.0-1
1.2.1-1
1.2.0-1
1.1.0-2
1.1.0-1
1.0.0-1
1.0.1-1
0.15.5-1
0.15.4-2
0.15.4-1
0.15.3-1
0.15.2-1
0.14.3-1
0.14.3-2
0.15.1-1
Vulnerabilities (9)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU126313 - Cross-Site Request Forgery (CSRF) CVE-2026-41425 |
CWE-352 | Medium | 0.15.5-1ubuntu0.1~esm2, 1.3.0-1ubuntu0.1~esm2, 1.6.7-1ubuntu0.1~esm1 | 16.04.2026 |
SB2026041629 SB20260714103 SB20260721105 |
||
| #VU124066 - Improper Verification of Cryptographic Signature CVE-2026-27962 |
CWE-347 | Critical | 0.15.5-1ubuntu0.1~esm2, 1.3.0-1ubuntu0.1~esm2, 1.6.7-1ubuntu0.1~esm1 | 17.03.2026 |
SB2026031735 SB2026032421 SB20260721105 |
||
| #VU124064 - Improper Validation of Integrity Check Value CVE-2026-28498 |
CWE-354 | High | 0.15.5-1ubuntu0.1~esm2, 1.3.0-1ubuntu0.1~esm2, 1.6.7-1ubuntu0.1~esm1 | 17.03.2026 |
SB2026031735 SB2026032421 SB20260721105 |
||
| #VU124063 - Use of a Broken or Risky Cryptographic Algorithm CVE-2026-28490 |
CWE-327 | High | 0.15.5-1ubuntu0.1~esm2, 1.3.0-1ubuntu0.1~esm2, 1.6.7-1ubuntu0.1~esm1 | 17.03.2026 |
SB2026031735 SB2026032421 SB20260721105 |
||
| #VU121112 - Cross-Site Request Forgery (CSRF) CVE-2025-68158 |
CWE-352 | Medium | 0.15.5-1ubuntu0.1~esm1, 1.3.0-1ubuntu0.1~esm1 | 08.01.2026 |
SB2026010859 SB2026022671 SB2026030584 |
||
| #VU117881 - Resource exhaustion CVE-2025-61920 |
CWE-400 | Medium | 0.15.5-1ubuntu0.1~esm1, 1.3.0-1ubuntu0.1~esm1 | 31.10.2025 |
SB2025103163 SB2025103166 SB2025112761 and 3 more |
||
| #VU117880 - Resource exhaustion CVE-2025-62706 |
CWE-400 | Medium | 0.15.5-1ubuntu0.1~esm1, 1.3.0-1ubuntu0.1~esm1 | 31.10.2025 |
SB2025103163 SB2025103168 SB2026022671 |
||
| #VU117879 - Incorrect Authorization CVE-2025-59420 |
CWE-863 | High | 0.15.5-1ubuntu0.1~esm1, 1.3.0-1ubuntu0.1~esm1 | 31.10.2025 |
SB2025103162 SB2025112761 SB20251210182 and 2 more |
||
| #VU91832 - Cryptographic Issues CVE-2024-37568 |
CWE-310 | Medium | 0.15.5-1ubuntu0.1~esm1, 1.3.0-1ubuntu0.1~esm1 | 12.06.2024 |
SB2024061201 SB2024061205 SB2024061206 and 2 more |