← All credits

David Borș (Snyk Security Research)

1 vulnerability record and advisories credit this contributor.

CVE-2025-14546
Versions of the package fastapi-sso before 0.19.0 are vulnerable to Cross-site Request Forgery (CSRF) due to the improper validation of the OAuth state parameter during the authentication callback. While the get_login_url method allows for state generatio