https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:06:16.385818+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-16206 CVE-2026-16206 — django-oauth django-oauth-toolkit oauth2_validators.py _load_id_token session expiration 2026-10-07T15:06:16.401884+00:00

Affected: django-oauth-toolkit

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function _load_id_token of the file oauth2_provider/oauth2_validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the problem early through an issue report but has not responded yet.