{"action":"Upgrade social-auth-core to 5.0.2 or later.","affected":[{"fixed":"5.0.2","introduced":"0"}],"component":"social-auth-core","cve_ids":["CVE-2026-62322"],"ecosystem":"PyPI","exploited":false,"fixed_versions":["5.0.2"],"ghsa_id":"GHSA-526j-582w-7fm9","id":"tcs_01M5JHFZ8XV2CKP5DSWXG8H2K8","modified_at":"2026-10-15T20:15:04.436524406Z","published_at":"2026-10-15T20:09:11Z","references":["https://osv.dev/vulnerability/GHSA-526j-582w-7fm9","https://github.com/python-social-auth/social-core/security/advisories/GHSA-526j-582w-7fm9","https://github.com/python-social-auth/social-core/pull/1829","https://github.com/python-social-auth/social-core/commit/5b3b90d07ebccc1f5b076445b27ea35ec059764b","https://github.com/python-social-auth/social-core","https://github.com/python-social-auth/social-core/releases/tag/5.0.2"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-526j-582w-7fm9","url":"https://osv.dev/vulnerability/GHSA-526j-582w-7fm9"}],"summary":"Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)"}