tocsin

Debian/social-auth-core: medium 6.5

Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an authorization code without validating the returned OAuth state. An attacker can begi

Action: Upgrade social-auth-core to 5.0.2-1 or later.

Affected

introducedfixedlast affected
05.0.2-1-

Fixed versions

5.0.2-1

Sources

published · modified · JSON