rpm package
suse/python-Authlib&distro=SUSE Linux Enterprise Server 15 SP6-LTSS
pkg:rpm/suse/python-Authlib&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-28498 | — | < 1.3.1-150600.3.17.1 | 1.3.1-150600.3.17.1 | Mar 16, 2026 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a library-level vulnerability was identified in the Authlib Python library concerning the validation of OpenID Connect (OIDC) ID Tokens. Specifically, the internal hash verification | ||
| CVE-2026-28490 | — | < 1.3.1-150600.3.17.1 | 1.3.1-150600.3.17.1 | Mar 16, 2026 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a cryptographic padding oracle vulnerability was identified in the Authlib Python library concerning the implementation of the JSON Web Encryption (JWE) RSA1_5 key management algori | ||
| CVE-2026-27962 | — | < 1.3.1-150600.3.17.1 | 1.3.1-150600.3.17.1 | Mar 16, 2026 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a JWK Header Injection vulnerability in authlib's JWS implementation allows an unauthenticated attacker to forge arbitrary JWT tokens that pass signature verification. When key=None |
- CVE-2026-28498Mar 16, 2026affected < 1.3.1-150600.3.17.1fixed 1.3.1-150600.3.17.1
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a library-level vulnerability was identified in the Authlib Python library concerning the validation of OpenID Connect (OIDC) ID Tokens. Specifically, the internal hash verification
- CVE-2026-28490Mar 16, 2026affected < 1.3.1-150600.3.17.1fixed 1.3.1-150600.3.17.1
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a cryptographic padding oracle vulnerability was identified in the Authlib Python library concerning the implementation of the JSON Web Encryption (JWE) RSA1_5 key management algori
- CVE-2026-27962Mar 16, 2026affected < 1.3.1-150600.3.17.1fixed 1.3.1-150600.3.17.1
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a JWK Header Injection vulnerability in authlib's JWS implementation allows an unauthenticated attacker to forge arbitrary JWT tokens that pass signature verification. When key=None