Skip to content
COOEY

FAIL › dossier

authlib

VENDOR

Failure events
1
Zero-days
0
RCEs
0
On KEV
0
Critical
1
Worst shame
35
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2026-03-06 CVE-2026-28802 critical Authlib is a Python library which builds OAuth and OpenID Connect servers. From version 1.6.5 to before version 1.6.7, previous tests involving passing a malicious JWT containing alg: none and an empty signature was passing the signature verification step without any changes to t
2026-03-06 CVE-2026-28802 critical Authlib is a Python library which builds OAuth and OpenID Connect servers. From version 1.6.5 to before version 1.6.7, previous tests involving passing a malicious JWT containing alg: none and an empty signature was passing the signature verification step without any changes to t