Authlib

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-28802 PyPI CRITICAL POC PATCH Act Now

JWT verification bypass in Authlib 1.6.5-1.6.6. PoC and patch available.

Python Authlib Red Hat Suse

NVD GitHub VulDB

CVSS 3.1

9.8

EPSS

0.0%

CVE-2025-59420 PyPI HIGH POC PATCH This Month

Authlib is a Python library which builds OAuth and OpenID Connect servers. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Python Privilege Escalation Authlib Red Hat

NVD GitHub

CVSS 3.1

7.5

EPSS

0.0%

CVE-2026-28802 PyPI

EPSS 0% CVSS 9.8

CRITICAL POC PATCH Act Now

JWT verification bypass in Authlib 1.6.5-1.6.6. PoC and patch available.

Python Authlib Red Hat +1

NVD GitHub VulDB

CVE-2025-59420 PyPI

EPSS 0% CVSS 7.5

HIGH POC PATCH This Month

Python Privilege Escalation Authlib +1

NVD GitHub