tocsin

CVE-2022-36087

2 advisories.

PyPI/oauthlib CVE-2022-36087: medium 5.7, EPSS 1.67%

OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI

Action: Upgrade oauthlib to 3.2.2 or later.

pip install oauthlib==3.2.2

Affected

introducedfixedlast affected
3.1.13.2.2-

Fixed versions

3.2.2

Sources

CVE-2022-36087 · published · modified · JSON

PyPI/oauthlib CVE-2022-36087: unknown, EPSS 1.67%

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An a

Action: Upgrade oauthlib to 3.2.1 or later.

pip install oauthlib==3.2.1

Affected

introducedfixedlast affected
3.1.13.2.1-

Fixed versions

3.2.1

Sources

CVE-2022-36087 · published · modified · JSON