OA
Product
oauthlib
by oauthlib · last CVE Oct 28, 2026
3
CVEs
0
On KEV
8.4
Max CVSS
3
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch

Add oauthlib to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-118669
New
8.4–Oct 28
OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client
Affected: < 4.0.0
Showing 1