GCVE - cpe:2.3:a:urbanairship:python-oauth2:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:urbanairship:python-oauth2:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Urbanairship (`04153d7d-6f76-53e4-ba86-861a98c02d9d`)
Product	Python Oauth2 (`00dc2dd7-ecba-5ee6-821a-70e480ddf0ec`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:docker/pypi/python-oauth2`	purl2cpe	2026-06-01 10:11:20.366849
`pkg:github/joestump/python-oauth2`	purl2cpe	2026-06-01 10:11:20.366852
`pkg:github/wndhydrnt/python-oauth2`	purl2cpe	2026-06-01 10:11:20.366855
`pkg:pypi/oauth2`	purl2cpe	2026-06-01 10:11:20.366857
`pkg:pypi/python-oauth2`	purl2cpe	2026-06-01 10:11:20.366860
`pkg:rpm/fedora/python-oauth2`	purl2cpe	2026-06-01 10:11:20.366863
`pkg:rpm/opensuse/python-oauth2`	purl2cpe	2026-06-01 10:11:20.366865

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4347`	vulnerable	2026-06-08 05:04:35.672515	Details available The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack. Published: 2014-05-20T14:00:00.000Z Updated: 2024-08-06T16:38:01.910Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/62388 https://github.com/simplegeo/python-oauth2/issues/9 http://www.openwall.com/lists/oss-security/2013/09/12/7 https://github.com/simplegeo/python-oauth2/pull/146	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4346`	vulnerable	2026-06-08 05:04:35.672098	Details available The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL. Published: 2014-05-20T14:00:00.000Z Updated: 2024-08-06T16:38:01.988Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/62386 http://www.openwall.com/lists/oss-security/2013/09/12/7 https://github.com/simplegeo/python-oauth2/issues/129	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.