Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-41425

Опубликовано: 24 апр. 2026
Источник: nvd
CVSS3: 5.4
EPSS Низкий

Описание

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.starlette_client.OAuth. This vulnerability is fixed in 1.6.11.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:authlib:authlib:*:*:*:*:*:*:*:*
Версия до 1.6.11 (исключая)

EPSS

Процентиль: 1%
0.00106
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 5.4
ubuntu
4 месяца назад

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.starlette_client.OAuth. This vulnerability is fixed in 1.6.11.

CVSS3: 5.4
redhat
4 месяца назад

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.starlette_client.OAuth. This vulnerability is fixed in 1.6.11.

CVSS3: 5.4
debian
4 месяца назад

Authlib is a Python library which builds OAuth and OpenID Connect serv ...

CVSS3: 5.4
github
4 месяца назад

Authlib: Cross-site request forging when using cache

suse-cvrf
28 дней назад

Security update for python-Authlib

EPSS

Процентиль: 1%
0.00106
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-352