Python-social-auth vulnerabilities
We track 1 vulnerability in Python-social-auth products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2026.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest Python-social-auth vulnerabilities
- 7.4 High severity
social-core: Improper Authentication
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the `vk-app` backend accepted VK application callback data without verifying the callback signature when the `auth_key` parameter was omitted. Applications using this