Mmastodon TechnologyCybersecurity first seen 16 d ago, last 16 d ago, peak #10

Medium-severity vulnerability disclosed in python-social-auth

Original: 🚨 EUVD-2026-109993 📊 Score: 6.8/10 (CVSS v3.1) 📦 Product: social-core 🏢 Vendor: python-social-auth 📅 Updated: 2026-10-26

A new vulnerability, EUVD-2026-109993, has been catalogued affecting the social-core package maintained under python-social-auth, a widely used social authentication and registration library for Python. The flaw, scored 6.8 out of 10 on the CVSS v3.1 scale, concerns the OpenIdConnectAuth backend in open_id_connect.py in versions prior to 6.2.0. Maintainers and users are expected to update to 6.2.0 or later. Security feeds flagged the entry on 26 October 2026.

Why now: Security feeds and developers circulate new vulnerability disclosures for widely used authentication libraries so affected projects can patch quickly.

python-social-authsocial-coreEUVD-2026-109993

Open on mastodon →

Evidence

• 🚨 EUVD-2026-109993 📊 Score: 6.8/10 (CVSS v3.1) 📦 Product: social-core 🏢 Vendor: python-social-auth 📅 Updated: 2026-10-26 📝 Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in social_core/backends/open_id_connect.py uses… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3763234