OAuthLib — CVE history (PyPI)
OAuthLib
3 CVEs affect the OAuthLib PyPI package (highest CVSS 6.8). Latest disclosed: 2026-10-13. Full CVE history sourced from NVD.
Summary
- Package
OAuthLib(PyPI)- Total CVEs
3- Actively exploited (CISA KEV)
- 0
- Highest CVSS
6.8- Latest disclosed
- 2026-10-13
Recent CVEs (top 3)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49265 | Medium | 6.8 | — | 2026-10-13 | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. |
CVE-2026-49264 | Medium | 6.1 | — | 2026-10-13 | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. |
CVE-2022-36087 | Medium | 5.7 | — | 2022-09-09 | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. |
All-time worst (top 3 by CVSS)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49265 | Medium | 6.8 | — | 2026-10-13 | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. |
CVE-2026-49264 | Medium | 6.1 | — | 2026-10-13 | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. |
CVE-2022-36087 | Medium | 5.7 | — | 2022-09-09 | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. |