[Git][security-tracker-team/security-tracker][master] Add CVE-2026-118669/python-oauthlib

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a1d75702 by Salvatore Bonaccorso at 2026-10-30T05:51:48+01:00
Add CVE-2026-118669/python-oauthlib

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1246,7 +1246,10 @@ CVE-2026-118689 (OvenMediaEngine through 0.21.0 contains a denial of service vul
 CVE-2026-118682 (KaringX ClashMi through 1.0.32.1801 disables TLS certificate validatio ...)
 	NOT-FOR-US: KaringX ClashMi
 CVE-2026-118669 (OAuthLib is an implementation of the OAuth request-signing logic for P ...)
-	TODO: check
+	- python-oauthlib <unfixed>
+	NOTE: https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c
+	NOTE: https://github.com/oauthlib/oauthlib/pull/920
+	NOTE: Fixed by: https://github.com/oauthlib/oauthlib/commit/c951a1d09f99f14e3240973fa83c4f4287d4753d (v4.0.0)
 CVE-2026-118668 (langgraph-api implements the LangGraph API for rapid development and t ...)
 	NOT-FOR-US: langgraph-api
 CVE-2026-118667 (LangGraph Python SDK is used to connect to running LangGraph API serve ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a1d75702bb2beafbc37bdfae0133f41b7df57100

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a1d75702bb2beafbc37bdfae0133f41b7df57100
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/98bf64cd/attachment.htm>