Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
django-oauth/django-oauth-toolkit
master @ ddec25b
52
Fixes
0
CVEs
HIGH
Peak severity
46.9%
Coverage
Highlights
Denial of Service: 20 prior fixes. Scrutinize any change in this area.
oauth2_provider/oauth2_validators.py: most-fixed (17 issues). Treat as high-risk during review.
19 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: A critical scope validation error occurred where set intersection was used instead of subset validation, allowing clients to obtain unauthorized scopes outside of their permitted configuration. Additionally, invalid grant codes and missing client secret checks on confidential clients bypassed active authentication mechanisms.
Open Redirect: Trailing-slash normalization and lack of strict fragment checks in the redirect URI validation allowed attackers to use path-traversal and open redirects to leak authorization codes.
Denial of Service: The basic authentication parsing functions and base64 decoders were highly vulnerable to unhandled exceptions (e.g., ValueError, TypeError, binascii.Error, IndexError) when handling malformed Authorization headers, allowing remote attackers to easily crash the service.