Python-social-auth - vulnerabilities (CVEs)
9 CVEs in 2 products, 2 in the last 30 days, newest from 2026-10-26.
Products
- Social-core - 7 CVEs
- Social-app-django - 2 CVEs
Newest CVEs of Python-social-auth
- CVE-2026-115910 - CVSS 6.8 (medium), 2026-10-26: Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in social_core/backends/open_id_connect.py uses…
- CVE-2026-62322 - CVSS 6.5 (medium), 2026-10-15: Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an authorization code without validating the…
- CVE-2026-57179 - CVSS 4.2 (medium), 2026-09-24: Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the partial-pipeline resume mechanism accepted `partial_token`…
- CVE-2026-57178 - CVSS 7.4 (high), 2026-09-24: Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the `vk-app` backend accepted VK application callback data…
- CVE-2026-57177 - CVSS 4.3 (medium), 2026-09-24: Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the LoginRadius backend did not validate OAuth state during the…
- CVE-2026-57176 - CVSS 6.8 (medium), 2026-09-24: Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the Vend OAuth2 backend used only the numeric Vend user_id as…
- CVE-2026-57175 - CVSS 6.4 (medium), 2026-09-24: Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the SAML backend accepted SAML responses on the Assertion…
- CVE-2025-61783 - CVSS 6.3 (medium), 2025-10-09: Python Social Auth is a social authentication/registration mechanism. In versions prior to 5.6.0, upon authentication, the user could be associated by e-mail…
- CVE-2024-32879 - CVSS 4.9 (medium), 2024-04-24: Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB…
