MEDIUM5.4PyPI
GHSA-8m3c-c723-h4p4· CVE-2025-65431, PYSEC-2025-111django-allauth's Okta and NetIQ implementations used a mutable identifier for authorization decisions
Modified: 6/5/2026
package
PyPI/django-allauth
pkg:pypi/django-allauth
MEDIUM5.4PyPI
GHSA-qhmc-3mvr-f2j4· CVE-2025-65430, PYSEC-2025-110django-allauth does not reject access tokens for inactive users
Modified: 6/5/2026
MEDIUM5.4PyPI
PYSEC-2025-110· CVE-2025-65430, GHSA-qhmc-3mvr-f2j4Modified: 6/10/2026
MEDIUM5.4PyPI
PYSEC-2025-111· CVE-2025-65431, GHSA-8m3c-c723-h4p4Modified: 6/10/2026
MEDIUM6.1PyPI
PYSEC-2026-56· CVE-2026-27982, GHSA-2jpr-83rg-v67jModified: 6/10/2026
MEDIUM4.3PyPI
GHSA-2jpr-83rg-v67j· CVE-2026-27982, PYSEC-2026-56django-allauth has an open redirect vulnerability
Modified: 6/5/2026