Python-social-auth

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 9
    Known Exploited: 0
    0
    Critical Level Threats
    1
    High Level Threats
    8
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-115910

    Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim

    Last Modified: Oct 31, 2026
    Published: Oct 26, 2026

    CVE-2026-62322

    Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)

    Last Modified: Oct 28, 2026
    Published: Oct 15, 2026

    CVE-2026-57179

    social-auth-core has a Session Fixation issue

    Last Modified: Sep 28, 2026
    Published: Sep 24, 2026

    CVE-2026-57178

    social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing

    Last Modified: Sep 28, 2026
    Published: Sep 24, 2026

    CVE-2026-57177

    social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend

    Last Modified: Oct 05, 2026
    Published: Sep 24, 2026
    Items Per Page
    Python-Social-Auth Vulnerabilities & Security CVEs | CVE-DB