Known vulnerabilities in oauthlib
Vendor:
idan (Idan Gazit)
Software:
oauthlib
Software CPE:
cpe:2.3:a:idan:oauthlib:*:*:*:*:*:*:*:*
Website:
https://github.com/idan/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
4.0.1
4.0.0
3.3.2
3.3.1
3.3.0
3.2.2
3.2.1
3.2.0
3.1.1
0.0.2
0.1.0
0.1.1
0.1.2
0.1.4
0.2.0
0.2.1
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.3.6
0.3.7
0.3.8
0.4.0
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.7.0
0.7.1
0.7.2
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
0.0.1
1.1.2
2.0.0
2.0.1
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.1.0
3.0.0
3.0.1
3.0.2
3.1.0
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU157644 - Improper Authentication CVE-2026-49272 |
CWE-287 | Medium | 4.0.0 | 25.10.2026 |
SB2026102503 |
||
| #VU152413 - Information Exposure Through Timing Discrepancy CVE-2026-49265 |
CWE-208 | Medium | 3.3.2 | 28.09.2026 |
SB20260928141 SB2026102148 SB2026110144 |
||
| #VU152411 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-49264 |
CWE-79 | Medium | 3.3.2 | 28.09.2026 |
SB20260928141 SB2026102148 SB20261022518 and 5 more |
||
| #VU67186 - Improper input validation CVE-2022-36087 |
CWE-20 | Medium | 3.2.1 | 12.09.2022 |
SB2022091220 SB2022092239 SB2022120113 and 17 more |