Search: CVE-2026-49265

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Unrated	–	EPSS 0.2%	CVE-2026-49265PKCE code_verifier Comparison · OAuthLib: Timing Attack Vulnerability UnratedEPSS 0.2%2026-10-15GCVE DatabaseCVE-2026-49265 A timing attack vulnerability exists in OAuthLib version 3.0 related to the comparison of the PKCE code_verifier parameter. This flaw could potentially allow an attacker to gain information through timing discrepancies during the verification process. EPSS 0.2%Vulnerability Microsoft Security Response Center CWE-208 #microsoft-security-response-ce	GCVE Database	2026-10-15

Page 1 of 1 · 2 duplicate CVE records merged