Red Hat Enterprise Linux 9/python-oauthlib
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client | oauthlibConfidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9 | PyPIRed Hat | High | Fix reported | |
| Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation | oauthlibConfidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9 | PyPIRed Hat | Medium | Fix reported | |
| Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208) | oauthlibConfidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9 | PyPIRed Hat | Medium | Fix reported |