Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: allauth Clear all filters
TI-2026-64275 CVE-2026-97764 · GHSA-qwgm-hfpp-4pf6

django-allauth before 65.19.4 does not have the expected limits on failed login attempts…

Priority LOW 17

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics (e.g., accents) for a higher effective…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00226 Published 2026-09-25 Fixed in 65.19.4 CWE-180
TI-2026-22324 CVE-2026-27982 · GHSA-2jpr-83rg-v67j

Open redirect in allauth django-allauth

Priority LOW 22

An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker to redirect users to an arbitrary external…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00188 Published 2026-03-05 Fixed in 65.14.1 CWE-601