python-social-auth

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

python-social-auth records in CISA KEV

No python-social-auth vulnerabilities are listed in CISA KEV.

Records

9 records

TI-2026-80499 CVE-2026-115910 · GHSA-h2r5-x5m7-3935

OpenID Connect nonce not bound to session in Python Social Auth

HIGH 65

Python Social Auth is a social authentication and registration mechanism.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00157 Published 2026-10-26 Partial fix · 6.2.0 CWE-345

TI-2025-38176 CVE-2025-61783 · GHSA-wv4w-6qv2-qqfg

Python Social Auth - Django has unsafe account association

MEDIUM 61

Python Social Auth is a social authentication/registration mechanism.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00542 Published 2025-10-09 Partial fix · 5.6.0 CWE-303

TI-2026-41144 CVE-2026-57178 · GHSA-3c93-f73f-qc9h

social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing

LOW 34

Python Social Auth is a social authentication/registration mechanism.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.0016 Published 2026-09-24 Partial fix · 5.0.0 CWE-287

TI-2026-41142 CVE-2026-57176 · GHSA-fp7w-m676-w7gc

social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend

LOW 31

Python Social Auth is a social authentication/registration mechanism.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00219 Published 2026-09-24 Partial fix · 5.0.0 CWE-289

TI-2026-41141 CVE-2026-57175 · GHSA-vq6g-g6c7-5f2j

social-auth-core has an Improper Authentication issue

LOW 30

Python Social Auth is a social authentication/registration mechanism.

CVSS 3.1MEDIUM 6.4 Network Low privileges User interaction EPSS 0.00228 Published 2026-09-24 Partial fix · 5.0.0 CWE-287

TI-2026-74654 CVE-2026-62322 · GHSA-526j-582w-7fm9

Login CSRF in Python Social Auth LINE backend

LOW 28

Python Social Auth is a social authentication/registration mechanism.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00153 Published 2026-10-15 Partial fix · 5.0.2 CWE-352

TI-2024-21751 CVE-2024-32879 · GHSA-2gr8-3wc7-xhj3

social-auth-app-django Improper Handling of Case Sensitivity vulnerability

LOW 23

Python Social Auth is a social authentication/registration mechanism.

CVSS 3.1MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00581 Published 2024-04-24 Partial fix · 5.4.1 CWE-178

TI-2026-41145 CVE-2026-57179 · GHSA-vqg6-3fw6-j9jg

social-auth-core has a Session Fixation issue

LOW 19

Python Social Auth is a social authentication/registration mechanism.

CVSS 3.1MEDIUM 4.2 Network No auth User interaction EPSS 0.00158 Published 2026-09-24 Partial fix · 5.0.0 CWE-384

TI-2026-41143 CVE-2026-57177 · GHSA-x7qq-23vw-7pfg

social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend

LOW 19

Python Social Auth is a social authentication/registration mechanism.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00108 Published 2026-09-24 Partial fix · 5.0.0 CWE-352

Open these records in search →