Skip to content

CVE record · 1 source

CVE-2026-49272

CVSS 8.5

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+.

Vendor: Oauthlib
Product: oauthlib
CVSS v3.1: 8.5 AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N
Weakness: CWE-287
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

47

CVE NVD 4h ago

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+.

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require DeviceCodeGrant.validate_token_request to check that the device_code…

PoC public CVSS 8.5 Fix available CVE-2026-49272 Oauthlib