Authlib

2 known vulnerabilities in Authlib, 2 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-104056 CVSS 9.8 critical Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or issuer-origin…
CVE-2026-96760 CVSS 9.8 critical Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts…