Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/authlib@1.6.2
purl pkg:pypi/authlib@1.6.2
Next non-vulnerable version 1.6.11
Latest non-vulnerable version 1.6.11
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-hrf7-xz6n-efcg
Aliases:
CVE-2026-41425
GHSA-jj8c-mmj3-mmgv
PYSEC-2026-25
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.starlette_client.OAuth. This vulnerability is fixed in 1.6.11.
1.6.11
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:24:54.800048+00:00 Pypa Importer Affected by VCID-hrf7-xz6n-efcg https://github.com/pypa/advisory-database/blob/main/vulns/authlib/PYSEC-2026-25.yaml 38.6.0