Security
فارسی
All products

Red Hat Ansible Automation Platform 2/python3x-social-auth-core

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victimCVE-2026-115910 · GHSA-H2R5-X5M7-3935 social-auth-coreRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported
Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)CVE-2026-62322 · GHSA-526J-582W-7FM9 social-auth-coreRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported
social-auth-core has an Improper Authentication issueCVE-2026-57175 · GHSA-VQ6G-G6C7-5F2JVersion ranges need review. social-auth-coreRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported
social-auth-core has a Session Fixation issueCVE-2026-57179 · GHSA-VQG6-3FW6-J9JGVersion ranges need review. social-auth-coreRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported
social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend BackendCVE-2026-57176 · GHSA-FP7W-M676-W7GCVersion ranges need review. social-auth-coreRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported
social-auth-core has Login CSRF via Missing State Parameter in LoginRadius BackendCVE-2026-57177 · GHSA-X7QQ-23VW-7PFGVersion ranges need review. social-auth-coreRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported