authlib

Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.

1. Authlib is vulnerable to Denial of Service via Oversized JOSE SegmentsCVE-2025-61920authlib · CVSS 7.5 · 0.6% likely

   CWE-770

2. Authlib JWS JWK Header Injection: Signature Verification BypassCVE-2026-27962authlib · CVSS 9.1 · 0.6% likely

   CWE-347

3. Authlib: Setting `alg: none` and a blank signature appears to bypass signature verificationCVE-2026-28802authlib · CVSS 9.1 · 0.5% likely

   CWE-347

4. Authlib : JWE zip=DEF decompression bomb enables DoSCVE-2025-62706authlib · CVSS 6.5 · 0.5% likely

   CWE-770

5. Authlib library contains a signature‑verification bypass vulnerabilityCVE-2026-96760Authlib · CVSS 9.8 · 0.4% likelycovered by CyberSIXT

   CWE-3471 article

6. lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. Unless an algorithm is specified in a jwt.decode call, HMAC verification is allowed with any asym…CVE-2024-37568Authlib · CVSS 7.5 · 0.4% likely

   CWE-284

7. Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRFCVE-2026-114620authlib · CVSS 5.4 · 0.4% likely

   CWE-918

8. Authlib: Default JWT bearer grant accepts assertions for the wrong audienceCVE-2026-114618authlib · CVSS 6.8 · 0.4% likely

   CWE-287

9. Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)CVE-2026-114616authlib · CVSS 7.4 · 0.3% likely

   CWE-326

10. Authlib: JWS/JWT accepts unknown crit headers (RFC violation → possible authz bypass)CVE-2025-59420authlib · CVSS 7.5 · 0.3% likely

    CWE-345

11. Authlib RFC 7592 examples omit registration-access-token client bindingCVE-2026-116672authlib · CVSS 8.8 · 0.3% likely

    CWE-639

12. Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hostsCVE-2026-114614authlib · CVSS 2.6 · 0.3% likely

    CWE-601

13. Authlib: 1-click Account TakeoverCVE-2025-68158authlib · CVSS 5.7 · 0.3% likely

    CWE-352

14. Authlib: ID token can disable its own nonce validation via the nonce_supported claimCVE-2026-114617authlib · CVSS 4.2 · 0.3% likely

    CWE-294

15. Authlib: Fail-Open Cryptographic Verification in OIDC Hash BindingCVE-2026-28498authlib · CVSS 9.1 · 0.3% likely

    CWE-354

16. Authlib OAuth 2.0 authorization endpoint open redirects to attacker-controlled redirect_uri on unsupported response_typeCVE-2026-41479authlib · CVSS 5.4 · 0.3% likely

    CWE-601

17. Authlib: Open Redirect in Authlib OIDC Implicit/Hybrid AuthorizationCVE-2026-44681authlib · CVSS 6.1 · 0.2% likely

    CWE-601

18. Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keysCVE-2026-114615authlib · CVSS 7.4 · 0.2% likely

    CWE-184

19. CVE-2026-104056Authlib · CVSS 9.8 · 0.2% likely

    CWE-346

20. Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokensCVE-2026-114619authlib · CVSS 4.6 · 0.2% likely

    CWE-863

21. Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding OracleCVE-2026-28490authlib · CVSS 8.3 · 0.2% likely

    CWE-203

22. Authlib: Cross-site request forging when using cacheCVE-2026-41425authlib · CVSS 5.4 · 0.1% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.