Denial of Service Vulnerability in Authlib Python Library from Authlib
CVE-2025-61920

7.5HIGH

Key Information:

Vendor

Authlib

Status
Authlib
Vendor
CVE Published:
10 October 2025

What is CVE-2025-61920?

The Authlib Python library, widely used for building OAuth and OpenID Connect servers, contained a vulnerability in its JOSE implementation before version 1.6.5. This flaw allowed a remote attacker to create a malformed token with base64url-encoded header or signature segments that could be extremely large. During the verification process, Authlib would decode and attempt to parse this oversized input, which could significantly increase CPU and memory usage, potentially leading to a denial of service condition. Users are advised to upgrade to version 1.6.5 to mitigate this issue and to implement input size limits and application-level throttling as temporary workarounds.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

authlib < 1.6.5

References

https://github.com/authlib/authlib/security/advisories/GH...
x_refsource_CONFIRM
https://github.com/authlib/authlib/commit/867e3f87b072347...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.