https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 23:20:08 +0000 https://db.gcve.eu/vuln/cve-2026-62322 <p><strong>Affected:</strong> python-social-auth social-core</p> <p>Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an authorization code without validating the returned OAuth state. An attacker can begin authorization for an attacker-controlled LINE account and induce a victim to visit the resulting callback URL, causing the application to log the victim into the attacker&#39;s account. When account linking is enabled, the same missing validation can link the attacker&#39;s LINE identity to the victim&#39;s existing account and create a persistent unauthorized login path. Only applications with the LINE backend enabled are affected. This issue is fixed in version 5.0.2.</p> <p><strong>Affected:</strong> python-social-auth social-core</p> <p>Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an authorization code without validating the returned OAuth state. An attacker can begin authorization for an attacker-controlled LINE account and induce a victim to visit the resulting callback URL, causing the application to log the victim into the attacker&#39;s account. When account linking is enabled, the same missing validation can link the attacker&#39;s LINE identity to the victim&#39;s existing account and create a persistent unauthorized login path. Only applications with the LINE backend enabled are affected. This issue is fixed in version 5.0.2.</p> https://db.gcve.eu/vuln/cve-2026-62322