python-Authlib vulnerabilities (SUSE)
10 vulnerabilities.
-
python-AuthlibSUSE Authlib OAuth 2.0 authorization endpoint open redirects to attacker-controlled redirect_uri on unsupported response_type 5.4 Medium -
python-AuthlibSUSE Authlib: Open Redirect in Authlib OIDC Implicit/Hybrid Authorization 6.1 Medium -
python-AuthlibSUSE Authlib: Cross-site request forging when using cache 5.4 Medium -
python-AuthlibSUSE Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding 8.2 High -
python-AuthlibSUSE Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle 8.3 High -
python-AuthlibSUSE Authlib JWS JWK Header Injection: Signature Verification Bypass 9.1 Critical -
python-AuthlibSUSE Authlib: 1-click Account Takeover 5.7 Medium -
python-AuthlibSUSE Authlib : JWE zip=DEF decompression bomb enables DoS 6.5 Medium -
python-AuthlibSUSE Authlib is vulnerable to Denial of Service via Oversized JOSE Segments 7.5 High -
python-AuthlibSUSE Authlib has algorithm confusion with asymmetric public keys 7.5 High