Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.starlette_client.OAuth. This vulnerability is fixed in 1.6.11.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-41425 CSRF Vulnerability in Authlib Starlette Client OAuth Cache Feature Prior to 1.6.11 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41425
Post summary
The post announces a CSRF vulnerability in Authlib's Starlette Client OAuth Cache Feature affecting versions before 1.6.11, but offers no proof of concept, exploit code, or patch information.
CVE-2026-41425 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.s… https://www.cve.org/CVERecord?id=CVE-2026-41425
Post summary
The text announces a CSRF protection flaw in Authlib’s cache feature before version 1.6.11, providing technical details but no evidence of exploitation or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | authlib | authlib | - | - | - |