GHSA-j4j7-8j5c-5hxwMediumCVSS 6.3

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue...

Published
July 19, 2026
Last Modified
July 19, 2026

🔗 CVE IDs covered (1)

📋 Description

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function _load_id_token of the file oauth2_provider/oauth2_validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the problem early through an issue report but has not responded yet.

🔗 References (9)