CVE WATCH / VULNERABILITY DETAIL
CVE-2026-114617
MEDIUMCVSS 4.2NVD feed
Published 22 October 2026 · tracked since 23 October 2026
Description
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parse_id_token() reads the nonce_supported decision from the untrusted ID token being validated and sets the expected nonce to null when that claim is the JSON boolean false. In implicit and hybrid
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-54630 CRITICAL 9.6
- CVE-2026-54631 MEDIUM 6.3
- CVE-2026-19678
- CVE-2026-115536 MEDIUM 4.3
- CVE-2026-115537 MEDIUM 4.3
- CVE-2026-115535 LOW 2.4
- CVE-2026-115534 MEDIUM 4.3
- CVE-2026-114625
- CVE-2026-83938 CRITICAL 10
- CVE-2026-114620 MEDIUM 5.4