Authlib OAuth 2.0 Authorization Endpoint Open Redirect Vulnerability

Authlib's OAuth 2.0 authorization endpoint can be turned into an unauthenticated open redirect when a request uses an unsupported response_type and supplies an attacker-controlled redirect_uri.

Any deployment using Authlib's OAuth 2.0 authorization server and the documented authorization endpoint flow.

Update to a patched version of Authlib once available, or apply a workaround such as validating redirect_uri before calling get_consent_grant.