OA
Vendor
oauthlib
3
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-118669 New | OA oauthlib oauthlib | 8.4 | Oct 28 | OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client |
| CVE-2026-49264 | OA oauthlib oauthlib | 6.1 | Oct 13 | OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation |
| CVE-2026-49265 | OA oauthlib oauthlib | 6.8 | Oct 13 | OAuthLib: Timing Attack Vulnerability in PKCE code_verifier Comparison |