Vulnerabilities in oauthlib
5 resultsCVE-2022-36087MEDIUMOAuthLib vulnerable DoS when attacker provides malicious IPV6 URIEPSS 1.8%CVE-2026-118669HIGHOAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different clientEPSS 0.3%CVE-2026-49265MEDIUMOAuthLib: Timing Attack Vulnerability in PKCE code_verifier ComparisonEPSS 0.2%CVE-2026-49264MEDIUMOAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationEPSS 0.2%CVE-2026-49272HIGHOAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflowEPSS —