PyPI/social-auth-core CVE-2026-62322: medium 6.5
Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)
Action: Upgrade social-auth-core to 5.0.2 or later.
pip install social-auth-core==5.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.2 | - |
Fixed versions
| 5.0.2 |
Sources
- osv: GHSA-526j-582w-7fm9
- https://github.com/python-social-auth/social-core/security/advisories/GHSA-526j-582w-7fm9
- https://github.com/python-social-auth/social-core/pull/1829
- https://github.com/python-social-auth/social-core/commit/5b3b90d07ebccc1f5b076445b27ea35ec059764b
- https://github.com/python-social-auth/social-core
- https://github.com/python-social-auth/social-core/releases/tag/5.0.2
CVE-2026-62322 · published · modified · JSON