CVE-2026-57176
2 advisories.
PyPI/social-auth-core CVE-2026-57176: medium 6.8, EPSS 0.22%
social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend
Action: Upgrade social-auth-core to 5.0.0 or later.
pip install social-auth-core==5.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.0 | - |
Fixed versions
| 5.0.0 |
Sources
- osv: GHSA-fp7w-m676-w7gc
- https://github.com/python-social-auth/social-core/security/advisories/GHSA-fp7w-m676-w7gc
- https://nvd.nist.gov/vuln/detail/CVE-2026-57176
- https://github.com/python-social-auth/social-core/pull/1795
- https://github.com/python-social-auth/social-core/commit/dee7ad1785877afd355dd6860598823d2631b76e
- https://github.com/python-social-auth/social-core
- https://github.com/python-social-auth/social-core/releases/tag/5.0.0
CVE-2026-57176 · published · modified · JSON
PyPI/social-auth-core CVE-2026-57176: medium 6.8, EPSS 0.22%
social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend
Action: Upgrade social-auth-core to 5.0.0 or later.
pip install social-auth-core==5.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.0 | - |
Fixed versions
| 5.0.0 |
Sources
- osv: PYSEC-2026-4166
- https://github.com/python-social-auth/social-core/security/advisories/GHSA-fp7w-m676-w7gc
- https://nvd.nist.gov/vuln/detail/CVE-2026-57176
- https://github.com/python-social-auth/social-core/pull/1795
- https://github.com/python-social-auth/social-core/commit/dee7ad1785877afd355dd6860598823d2631b76e
- https://github.com/python-social-auth/social-core
- https://github.com/python-social-auth/social-core/releases/tag/5.0.0
- https://pypi.org/project/social-auth-core
- https://github.com/advisories/GHSA-fp7w-m676-w7gc
CVE-2026-57176 · published · modified · JSON