CVE-2025-68481
2 advisories.
PyPI/fastapi-users CVE-2025-68481: medium 5.9
FastAPI Users Vulnerable to 1-click Account Takeover in Apps Using FastAPI SSO
Action: Upgrade fastapi-users to 15.0.2 or later.
pip install fastapi-users==15.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 15.0.2 | - |
Fixed versions
| 15.0.2 |
Sources
- osv: GHSA-5j53-63w8-8625
- https://github.com/fastapi-users/fastapi-users/security/advisories/GHSA-5j53-63w8-8625
- https://nvd.nist.gov/vuln/detail/CVE-2025-68481
- https://github.com/fastapi-users/fastapi-users/commit/7cf413cd766b9cb0ab323ce424ddab2c0d235932
- https://github.com/fastapi-users/fastapi-users
- https://github.com/fastapi-users/fastapi-users/blob/bcee8c9b884de31decb5d799aead3974a0b5b158/fastapi_users/router/oauth.py#L111
- https://github.com/fastapi-users/fastapi-users/blob/bcee8c9b884de31decb5d799aead3974a0b5b158/fastapi_users/router/oauth.py#L57
CVE-2025-68481 · published · modified · JSON
PyPI/fastapi-users CVE-2025-68481: medium 5.9
FastAPI Users Vulnerable to 1-click Account Takeover in Apps Using FastAPI SSO
Action: Upgrade fastapi-users to 15.0.2 or later.
pip install fastapi-users==15.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 15.0.2 | - |
Fixed versions
| 15.0.2 |
Sources
- osv: PYSEC-2026-1363
- https://github.com/fastapi-users/fastapi-users/security/advisories/GHSA-5j53-63w8-8625
- https://nvd.nist.gov/vuln/detail/CVE-2025-68481
- https://github.com/fastapi-users/fastapi-users/commit/7cf413cd766b9cb0ab323ce424ddab2c0d235932
- https://github.com/fastapi-users/fastapi-users
- https://github.com/fastapi-users/fastapi-users/blob/bcee8c9b884de31decb5d799aead3974a0b5b158/fastapi_users/router/oauth.py#L111
- https://github.com/fastapi-users/fastapi-users/blob/bcee8c9b884de31decb5d799aead3974a0b5b158/fastapi_users/router/oauth.py#L57
- https://pypi.org/project/fastapi-users
- https://github.com/advisories/GHSA-5j53-63w8-8625
CVE-2025-68481 · published · modified · JSON