Allauth Django-Allauth
2 CVEs affecting Allauth Django-Allauth. Latest disclosed: 2026-09-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-27982 | Medium | 6.1 | 2026-03-05 | An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may… |
CVE-2026-97764 | Low | 3.7 | 2026-09-25 | django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the h… |