AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-36087

MEDIUM · CVSS 5.7 EPSS 1.32% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-09-09 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2022-36087
Severity
MEDIUM
CVSS
5.7
EPSS
1.32%

Original NVD Description

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions depending where it is used. OAuthLib applications using OAuth2.0 provider support or use directly `uri_validate` are affected by this issue. Version 3.2.1 contains a patch. There are no known workarounds.