Skip to content

PatchFirst · Latest vulnerabilities

python-authlib vulnerabilities · Page 2

Vulnerabilities published for python-authlib in the last 30 days: 9. Listed in the KEV catalogue: 0.

Vulnerabilities: 21

CVE-2024-37568
High · CVSS 7.5EPSS 0.38%Fix available
CVE-2024-37568
lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. Unless an algorithm is specified in a jwt.decode call, HMAC verification is allowed with any asymmetric public key. (This is similar to CVE-2022-29217 and CVE-2024-33663.)
python-authlib Operating systems
- Update to 1.3.1-1
Published June 9, 2024Updated November 3, 2025
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →