lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. Unless an algorithm is specified in a jwt.decode call, HMAC verification is allowed with any asymmetric public key. (This is similar to CVE-2022-29217 and CVE-2024-33663.)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. Unless an algorithm is
    specified in a jwt.decode call, HMAC verification is allowed with any asymmetric public key. (This is
    similar to CVE-2022-29217 and CVE-2024-33663.) (CVE-2024-37568)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8065-1 advisory.

    Millie Solem discovered that Authlib did not properly restrict algorithm selection during JWT     verification, allowing HMAC verification with asymmetric public keys when no algorithm was specified. A     remote attacker could possibly use this issue to bypass signature verification and forge tokens, resulting     in authentication bypass or privilege escalation. (CVE-2024-37568)

    Muhammad Noman Ilyas discovered that Authlib did not properly enforce critical header parameter handling     during JSON Web Signature verification, leading to unknown critical parameters being incorrectly accepted.
    A remote attacker could possibly use this issue to bypass security policies in mixed deployments,     resulting in authentication bypass, replay attacks, or privilege escalation. (CVE-2025-59420)

    Muhammad Noman Ilyas discovered that Authlib did not properly limit the size of JSON Web Signature or JSON     Web Token header and signature segments. A remote attacker could possibly use this issue to cause     excessive memory or processor consumption, leading to a denial of service. (CVE-2025-61920)

    Muhammad Noman Ilyas discovered that Authlib performed unbounded decompression when processing certain     compressed encrypted tokens. A remote attacker could possibly use this issue to send a specially crafted     token that can be expanded to a large size during decompression, causing a denial of service.
    (CVE-2025-62706)

    It was discovered that Authlib did not properly bind cached state information to the initiating user     session during OAuth authentication flows. A remote attacker could possibly use this issue to perform     cross- site request forgery attacks, resulting in unauthorized actions or authentication bypass. This     issue only affected Ubuntu 24.04 LTS. (CVE-2025-68158)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4352 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4352-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Daniel Leidert     October 29, 2025                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : python-authlib     Version        : 0.15.4-1+deb11u1     CVE ID         : CVE-2024-37568 CVE-2025-59420 CVE-2025-61920 CVE-2025-62706


    Multiple vulnerabilities have been found in python-authlib, a Python     library for OAuth and OpenID Connect servers.

    CVE-2024-37568

        Unless an algorithm is specified in a jwt.decode call, HMAC verification         is allowed with any asymmetric public key.

    CVE-2025-59420

        Authlibs JWS verification accepts tokens that declare unknown critical         header parameters (crit), violating RFC 7515 mustunderstand semantics.
        An attacker can craft a signed token with a critical header that strict         verifiers reject but Authlib accepts. In mixedlanguage fleets, this         enables splitbrain verification and can lead to policy bypass, replay,         or privilege escalation.

    CVE-2025-61920

        Authlibs JOSE implementation accepts unbounded JWS/JWT header and         signature segments which can lead to a DoS during verification.

    CVE-2025-62706

        Authlibs JWE zip=DEF path performs unbounded DEFLATE decompression         which can lead to a DoS.


    For Debian 11 bullseye, these problems have been fixed in version     0.15.4-1+deb11u1.

    We recommend that you upgrade your python-authlib packages.

    For the detailed security status of python-authlib please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/python-authlib

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: This is a digitally signed message part

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1134 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-37568:
    lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. Unless an algorithm is     specified in a jwt.decode call, HMAC verification is allowed with any asymmetric public key. (This is     similar to CVE-2022-29217 and CVE-2024-33663.)

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. Unless an algorithm is     specified in a jwt.decode call, HMAC verification is allowed with any asymmetric public key. (This is     similar to CVE-2022-29217 and CVE-2024-33663.) (CVE-2024-37568)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2e9c58d661 advisory.

    Update to v1.3.1 (CVE-2024-37568)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2064-1 advisory.

    - Update to version 1.3.1
    - CVE-2024-37568: Fixed algorithm confusion with asymmetric public keys. (bsc#1226138)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7cc9a030d9 advisory.

    Update to v1.3.1 (CVE-2024-37568)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
462694	Echo: authlib: security update to 1.3.1	Tenable Cloud Security	Echo Local Security Checks	Local	high
462694	Echo: authlib: security update to 1.3.1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
300274	Ubuntu 22.04 LTS / 24.04 LTS : Authlib vulnerabilities (USN-8065-1)	Nessus	Ubuntu Local Security Checks	Local	high
271941	Debian dla-4352 : python-authlib-doc - security update	Nessus	Debian Local Security Checks	Local	high
239461	TencentOS Server 4: python-authlib (TSSA-2024:1134)	Nessus	Tencent Local Security Checks	Local	high
228837	Linux Distros Unpatched Vulnerability : CVE-2024-37568	Nessus	Misc.	Local	high
410522	SCA: security update for authlib (GHSA-5357-c2jx-v7qh)	Tenable Cloud Security	SCA Checks	Local	high
410522	SCA: security update for authlib (GHSA-5357-c2jx-v7qh)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
200770	Fedora 39 : python-authlib (2024-2e9c58d661)	Nessus	Fedora Local Security Checks	Local	high
200712	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-Authlib (SUSE-SU-2024:2064-1)	Nessus	SuSE Local Security Checks	Local	high
200692	Fedora 40 : python-authlib (2024-7cc9a030d9)	Nessus	Fedora Local Security Checks	Local	high

Detections

Analytics

CVE-2024-37568

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high