Vulnerabilities in python-social-auth
9 resultsCVE-2024-32879MEDIUMsocial-auth-app-django Improper Handling of Case Sensitivity vulnerabilityEPSS 0.6%CVE-2025-61783MEDIUMPython Social Auth - Django has unsafe account associationEPSS 0.5%CVE-2026-57175MEDIUMsocial-auth-core has an Improper Authentication issueEPSS 0.2%CVE-2026-57176MEDIUMsocial-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend BackendEPSS 0.2%CVE-2026-57178HIGHsocial-auth-core: VK App backend accepts unsigned callback data when auth_key is missingEPSS 0.2%CVE-2026-57179MEDIUMsocial-auth-core has a Session Fixation issueEPSS 0.2%CVE-2026-115910MEDIUMPython Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victimEPSS 0.2%CVE-2026-62322MEDIUMPython Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)EPSS 0.2%CVE-2026-57177MEDIUMsocial-auth-core has Login CSRF via Missing State Parameter in LoginRadius BackendEPSS 0.1%