python-social-auth

Trends

1
Medium-severity vulnerability disclosed in python-social-auth●🚨 EUVD-2026-109993 📊 Score: 6.8/10 (CVSS v3.1) 📦 Product: social-core 🏢 Vendor: python-social-auth 📅 Updated: 2026-10-26Mmastodon Technology Cybersecurity016 d ago
A new vulnerability, EUVD-2026-109993, has been catalogued affecting the social-core package maintained under python-social-auth, a widely used social authentication and registration library for Python. The flaw, scored 6.8 out of 10 on the CVSS v3.1 scale, concerns the OpenIdConnectAuth backend in open_id_connect.py in versions prior to 6.2.0. Maintainers and users are expected to update to 6.2.0 or later. Security feeds flagged the entry on 26 October 2026.