social-auth-core vulnerabilities (Ubuntu)
2 vulnerabilities.
-
social-auth-coreUbuntu Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim 6.8 Medium -
social-auth-coreUbuntu Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign) 6.5 Medium