By vendor

Authlib vulnerabilities

Known CVEs affecting Authlib products, prioritized by severity, with SEC.co remediation and detection guidance.

1 published vulnerability

• CVE-2026-41479MEDIUM 5.4

  Authlib, a popular Python library for building OAuth and OpenID Connect servers, contains an open redirect vulnerability in its authorization endpoint. When an attacker sends a specially crafted request with an unsupported response type and a malicious redirect URL, the server redirects users to that attacker-controlled site without proper validation. This happens before the system even checks if the client is legitimate or if the user is logged in, meaning an attacker needs no prior setup—just a single request can redirect an unsuspecting user elsewhere. The flaw affects versions before 1.6.10 and 1.7.1.