CVE-2026-41425

· NIST NVD ↗

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.starlette_client.OAuth. This vulnerability is fixed in 1.6.11.

MEDIUM
CVSS severity
5.4
CVSS base score
2026-04-24
Published

CWE codes

CWE-352

Affected products

authlib:authlib

Sources