Threats tagged 'ghsa-c5mf-xmp2-59rc'

Authlib versions prior to 1.9.0 contain a vulnerability in the OpenID ID token nonce validation process. The ID token's nonce validation can be disabled if the token includes a boolean false nonce_supported claim, causing the expected nonce to be set to None and skipping nonce validation. This allows an attacker to replay a validly signed ID token from a victim into an attacker-controlled session, authenticating as the victim. The vulnerability affects implicit and hybrid flows and direct calls to parse_id_token(), but not the authorization code flow. A fix is available in version 1.9.0.