Authlib

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 31
    Known Exploited: 0
    5
    Critical Level Threats
    10
    High Level Threats
    14
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-119284

    joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection

    Last Modified: Oct 30, 2026
    Published: Oct 29, 2026

    CVE-2026-119283

    joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption

    Last Modified: Oct 30, 2026
    Published: Oct 29, 2026

    CVE-2026-116672

    Authlib RFC 7592 examples omit registration-access-token client binding

    Last Modified: Oct 27, 2026
    Published: Oct 27, 2026

    CVE-2026-114620

    Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF

    Last Modified: Oct 29, 2026
    Published: Oct 22, 2026

    CVE-2026-114619

    Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokens

    Last Modified: Oct 29, 2026
    Published: Oct 22, 2026
    Items Per Page