CVE-2026-16206 – django-oauth django-oauth-toolkit oauth2_validators.py _load_id_token session expiration

CVE ID :CVE-2026-16206

Published : July 19, 2026, 3:16 a.m. | 23 minutes ago

Description :A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function _load_id_token of the file oauth2_provider/oauth2_validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the problem early through an issue report but has not responded yet.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…