Known vulnerabilities in authlib

Vendor: Authlib
Software: authlib
Software CPE: cpe:2.3:a:lepture:authlib:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting authlib authlib is affected by 12 known vulnerabilities: 1 critical, 4 high, 6 medium, 1 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133912 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-41479
CWE-601 Low
No
No
1.6.10, 1.7.1 08.06.2026 SB2026060843
#VU130999 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-44681
CWE-601 Medium
No
No
1.6.12, 1.7.1 11.05.2026 SB2026051194
SB20260714103
#VU126313 - Cross-Site Request Forgery (CSRF)
CVE-2026-41425
CWE-352 Medium
No
No
1.6.11 16.04.2026 SB2026041629
SB20260714103
SB20260721105
#VU124066 - Improper Verification of Cryptographic Signature
CVE-2026-27962
CWE-347 Critical
No
No
1.6.9 17.03.2026 SB2026031735
SB2026032421
SB20260721105
#VU124064 - Improper Validation of Integrity Check Value
CVE-2026-28498
CWE-354 High
No
No
1.6.9 17.03.2026 SB2026031735
SB2026032421
SB20260721105
#VU124063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-28490
CWE-327 High
No
No
1.6.9 17.03.2026 SB2026031735
SB2026032421
SB20260721105
#VU123529 - Improper Authentication
CVE-2026-28802
CWE-287 High
No
No
1.6.7 04.03.2026 SB2026030442
#VU121112 - Cross-Site Request Forgery (CSRF)
CVE-2025-68158
CWE-352 Medium
No
No
1.6.6 08.01.2026 SB2026010859
SB2026022671
SB2026030584
#VU117881 - Resource exhaustion
CVE-2025-61920
CWE-400 Medium
No
No
1.6.5 31.10.2025 SB2025103163
SB2025103166
SB2025112761
and 3 more
#VU117880 - Resource exhaustion
CVE-2025-62706
CWE-400 Medium
No
No
1.6.5 31.10.2025 SB2025103163
SB2025103168
SB2026022671
#VU117879 - Incorrect Authorization
CVE-2025-59420
CWE-863 High
No
No
1.6.4 31.10.2025 SB2025103162
SB2025112761
SB20251210182
and 2 more
#VU91832 - Cryptographic Issues
CVE-2024-37568
CWE-310 Medium
No
No
1.3.1 12.06.2024 SB2024061201
SB2024061205
SB2024061206
and 2 more