oauthlib vulnerabilities
5 published CVEs name oauthlib among the affected products.
- Published CVEs
- 5
- Last 12 months
- 4
- Critical
- 0
- Known exploited
- 0
Critical 0High 2Medium 3Low 0Not scored 0
CVEs per yearBy the year they were published
- 20221
- 20264
Newest CVEs
- CVE-2026-49272
OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow
oauthlib · oauthlib
High8.5 - CVE-2026-118669
OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client
oauthlib · oauthlib
High8.4 - CVE-2026-49264
OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation
oauthlib · oauthlib
Medium6.1 - CVE-2026-49265
OAuthLib: Timing Attack Vulnerability in PKCE code_verifier Comparison
oauthlib · oauthlib
Medium6.8 - CVE-2022-36087
OAuthLib vulnerable DoS when attacker provides malicious IPV6 URI
oauthlib · oauthlib
Medium5.7