TI-2025-40360 CVE-2025-65431 · GHSA-8m3c-c723-h4p4
An issue was discovered in allauth-django before 65.13.0.
Priority LOW 24
An issue was discovered in allauth-django before 65.13.0.
allauth
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
allauth records in CISA KEVNo allauth vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2025-40359 CVE-2025-65430 · GHSA-qhmc-3mvr-f2j4
An issue was discovered in allauth-django before 65.13.0.
Priority LOW 24
An issue was discovered in allauth-django before 65.13.0.
TI-2026-22324 CVE-2026-27982 · GHSA-2jpr-83rg-v67j
Open redirect in allauth django-allauth
Priority LOW 22
An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker to redirect users to an arbitrary external…
TI-2026-64275 CVE-2026-97764 · GHSA-qwgm-hfpp-4pf6
django-allauth before 65.19.4 does not have the expected limits on failed login attempts…
Priority LOW 17
django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics (e.g., accents) for a higher effective…