OSV - Open Source Vulnerabilities

CLEANSTART-2026-CQ05396

CleanStart/airflow-2

Security fixes for CVE-2025-32962, CVE-2025-58065, CVE-2026-22815, CVE-2026-25645, CVE-2026-26007, CVE-2026-27205, CVE-2026-27459, CVE-2026-30922, CVE-2026-31958, CVE-2026-32597, CVE-2026-33936, CVE-2026-34513, CVE-2026-34514, CVE-2026-34515, CVE-2026-34516, CVE-2026-34517, CVE-2026-34518, CVE-2026-34519, CVE-2026-34520, CVE-2026-34525, CVE-2026-35536, CVE-2026-39892, CVE-2026-41066, CVE-2026-41205, CVE-2026-41425, CVE-2026-42561, CVE-2026-44307, CVE-2026-44431, CVE-2026-44432, CVE-2026-44503, CVE-2026-44681, CVE-2026-45309, CVE-2026-4539, CVE-2026-45409, CVE-2026-48522, CVE-2026-48523, CVE-2026-48524, CVE-2026-48525, CVE-2026-48526, CVE-2026-8838, ghsa-78cv-mqj4-43f7, ghsa-7j59-v9qr-6fq9 applied in versions: 2.11.0-r2, 2.11.2-r1, 2.11.2-r2, 2.11.2-r3

08 Jun

Fix available

ROOT-APP-PYPI-CVE-2026-41425

Root:PyPI/Authlib
Root:PyPI/rootio-Authlib

CVE-2026-41425 in rootio-Authlib - Patched by Root

08 Jun

Fix available
Severity - 5.4 (Medium)

DEBIAN-CVE-2026-41425

Debian:12/python-authlib
Debian:13/python-authlib
Debian:14/python-authlib

See record for full details

24 Apr

Fix available
Severity - 5.4 (Medium)

PYSEC-2026-25

PyPI/authlib

See record for full details

24 Apr

Fix available
Severity - 5.4 (Medium)

UBUNTU-CVE-2026-41425

Ubuntu:25.10/python-authlib
Ubuntu:26.04:LTS/python-authlib
Ubuntu:Pro:22.04:LTS/python-authlib
Ubuntu:Pro:24.04:LTS/python-authlib

See record for full details

24 Apr

No fix available
Severity - 5.4 (Medium)

GHSA-jj8c-mmj3-mmgv

PyPI/authlib

Authlib: Cross-site request forging when using cache

16 Apr

Fix available
Severity - 5.4 (Medium)