python-social-auth/social-core
master@ e58a721Fixes8
CVEs0
Peak severityHigh
Commits3,386
Regression coverage83.3%
Highlights
Signature Verification Bypass: 5 prior fixes. Scrutinize any change in this area.
social_core/backends/azuread_b2c.py: most-fixed (3 issues). Treat as high-risk during review.
8 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Signature Verification Bypass: 3 historical fix(es) link social_core/backends/azuread_b2c.py to Signature Verification Bypass.
Authentication Bypass: 1 historical fix(es) link social_core/backends/odnoklassniki.py to Authentication Bypass.
Open Redirect: 1 historical fix(es) link social_core/utils.py to Open Redirect.
Last analyzed 30 Sep 2026, 02:53 UTC