oauthlib vulnerabilities (PyPI)
5 vulnerabilities.
-
oauthlibPyPI OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client 8.4 High -
oauthlibPyPI OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow 8.5 High -
oauthlibPyPI OAuthLib: Timing Attack Vulnerability in PKCE code_verifier Comparison 6.8 Medium -
oauthlibPyPI OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation 6.1 Medium -
oauthlibPyPI OAuthLib vulnerable DoS when attacker provides malicious IPV6 URI 5.7 Medium