social-auth-core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-62322Mediumsocial-auth-core: Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)CVE-2026-57179Mediumsocial-auth-core: social-auth-core has a Session Fixation issue CVE-2026-57178Highsocial-auth-core: social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing CVE-2026-57177Mediumsocial-auth-core: social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend CVE-2026-57176Mediumsocial-auth-core: social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend CVE-2026-57175Mediumsocial-auth-core: social-auth-core has an Improper Authentication issue

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo