Vulnerabilities for oauth2

First version without a known vulnerability: 1.9.0.post1

Details

• GHSA-4433-4cxq-vv732022-05-17

  SimpleGeo python-oauth2 does not check the nonce allowing replay attacks

  Fixed in: 1.9rc1

• GHSA-rv8h-p43r-4x5r2022-05-17

  SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces

  Fixed in: 1.9rc1