OESA-2022-1971

Dashboard / Vulnerabilities / OESA-2022-1971

OESA-2022-1971

Summary: python-oauthlib security update

Details: Security Fix(es): OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions depending where it is used. OAuthLib applications using OAuth2.0 provider support or use directly `uri_validate` are affected by this issue. Version 3.2.1 contains a patch. There are no known workarounds.(CVE-2022-36087)

References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1971, https://nvd.nist.gov/vuln/detail/CVE-2022-36087