TI-2026-80499 CVE-2026-115910 · GHSA-h2r5-x5m7-3935
OpenID Connect nonce not bound to session in Python Social Auth
Priority HIGH 65
Python Social Auth is a social authentication and registration mechanism.
Vulnerabilities
9 records
TI-2026-74654 CVE-2026-62322 · GHSA-526j-582w-7fm9
Login CSRF in Python Social Auth LINE backend
Priority LOW 28
Python Social Auth is a social authentication/registration mechanism.
TI-2026-41145 CVE-2026-57179 · GHSA-vqg6-3fw6-j9jg
social-auth-core has a Session Fixation issue
Priority LOW 19
Python Social Auth is a social authentication/registration mechanism.
TI-2026-41144 CVE-2026-57178 · GHSA-3c93-f73f-qc9h
social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing
Priority LOW 34
Python Social Auth is a social authentication/registration mechanism.
TI-2026-41143 CVE-2026-57177 · GHSA-x7qq-23vw-7pfg
social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend
Priority LOW 19
Python Social Auth is a social authentication/registration mechanism.
TI-2026-41142 CVE-2026-57176 · GHSA-fp7w-m676-w7gc
social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend
Priority LOW 31
Python Social Auth is a social authentication/registration mechanism.
TI-2026-41141 CVE-2026-57175 · GHSA-vq6g-g6c7-5f2j
social-auth-core has an Improper Authentication issue
Priority LOW 30
Python Social Auth is a social authentication/registration mechanism.
TI-2025-38176 CVE-2025-61783 · GHSA-wv4w-6qv2-qqfg
Python Social Auth - Django has unsafe account association
Priority MEDIUM 61
Python Social Auth is a social authentication/registration mechanism.
TI-2024-21751 CVE-2024-32879 · GHSA-2gr8-3wc7-xhj3
social-auth-app-django Improper Handling of Case Sensitivity vulnerability
Priority LOW 23
Python Social Auth is a social authentication/registration mechanism.