CVE-2026-49272 - OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow
CVE ID :CVE-2026-49272 Published : Nov. 5, 2026, 9:18 p.m. | 1 hour, 50 minutes ago Description :OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require...