fastapi-sso vulnerabilities

CVEs whose affected-version data names the fastapi-sso package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-14546Medium· 6.3

10mo ago

Versions of the package fastapi-sso before 0.19.0 are vulnerable to Cross-site Request Forgery (CSRF) due to the improper validation of the OAuth state parameter during the authentication callback

Versions of the package fastapi-sso before 0.19.0 are vulnerable to Cross-site Request Forgery (CSRF) due to the improper validation of the OAuth state parameter during the authentication callback. While the get_login_url method allows f…

▾ Sunlitfastapi-sso · fastapi-ssoEPSS 0.36%via NVD