flask-oidc Open Redirect vulnerability

ALTO 7.4CVE-2016-1000001 · GHSA-f9q6-69fh-4w5w · PYSEC-2016-25 · Published 07/10/2016 · updated 17/06/2026

En resumen

CVE-2016-1000001 es una vulnerabilidad ALTO (CVSS 7.4) que afecta a flask-oidc, flask-oidc (flask-oidc project).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.81%, mayor que el 57.2% de las vulnerabilidades.
Solución: actualizar a 1.0.0 o posterior.

Package	Affected versions	Patched versions
flask-oidc PyPI	`< 1.0.0`	`1.0.0`
flask-oidc flask-oidc_project	`≤ 0.1.2`	No fix yet

flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect.

NVD description

flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect

Running one of these products? Scan your site to see whether it exposes a vulnerable version.