Packages / Debian 13 (Trixie) / Source / python / social-auth-core
Core component of the python-social-auth ecosystem (Python3)
Matching against OpenFactory catalog package versions is in progress.
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-115910] Published: social-auth-core: CVE-2026-115910 | Medium | AffectedDetails (2)
|
| [CVE-2026-62322] Published: social-auth-core: CVE-2026-62322 | Medium(6.5) | AffectedDetails (2)
|
| [CVE-2026-57179] Published: Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the partial-pipeline resume mechanism accepted `partial_token` as a bearer credential without binding it t | Medium(4.2) | AffectedDetails (2)
|
| [CVE-2026-57178] Published: Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the `vk-app` backend accepted VK application callback data without verifying the callback signature when t | High(7.4) | AffectedDetails (2)
|
| [CVE-2026-57177] Published: Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the LoginRadius backend did not validate OAuth state during the authentication flow. Applications using th | Medium(4.3) | AffectedDetails (2)
|
| [CVE-2026-57176] Published: Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the Vend OAuth2 backend used only the numeric Vend user_id as the social-auth UID. When multiple Vend shop | Medium(6.8) | AffectedDetails (2)
|
| [CVE-2026-57175] Published: Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without verifying that | Medium(6.4) | AffectedDetails (2)
|
Last synced:
Authoritative source; repository metadata signature verified
trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Authoritative source; repository metadata signature verified
trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908