SUSE CVE-2025-65431

An issue was discovered in allauth-django before 65.13.0. Both Okta and NetIQ were using preferredusername as the identifier for third-party provider accounts. That value may be mutable and should therefore be avoided for authorization decisions. The providers are now using sub instead...

bma (>=0.2.0a1, <=0.2.0a2), django-daiquiri (>=1.3.0.dev0, <=1.3.1) +8 more potentially affected by CVE-2025-65431 via django-allauth (>=65.0.0, <=65.12.1)

django-allauth PYPI version =65.0.0, =0.2.0a1, =1.3.0.dev0, =1.0.3, =0.3.8, =4.0.0rc2, =0.163.0, =2.0.0, =1.0.0, =5.0.0, =5.0.1 Source cves: CVE-2025-65431 Source advisory: GHSA-8M3C-C723-H4P4...

grooveshop-django-api (0.65.0) potentially affected by CVE-2025-65431 via django-allauth (0.61.0)

django-allauth PYPI version 0.61.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - grooveshop-django-api 0.65.0 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

grooveshop-django-api (0.109.0) potentially affected by CVE-2025-65431 via django-allauth (0.62.0)

django-allauth PYPI version 0.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - grooveshop-django-api 0.109.0 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

grooveshop-django-api (>=0.126.0, <=0.127.0) potentially affected by CVE-2025-65431 via django-allauth (0.63.2)

django-allauth PYPI version 0.63.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - grooveshop-django-api =0.126.0, =0.127.0 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

grooveshop-django-api (0.140.0) potentially affected by CVE-2025-65431 via django-allauth (64.0.0)

django-allauth PYPI version 64.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - grooveshop-django-api 0.140.0 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

grooveshop-django-api (>=0.141.0, <=0.153.1) potentially affected by CVE-2025-65431 via django-allauth (64.1.0)

django-allauth PYPI version 64.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - grooveshop-django-api =0.141.0, =0.153.1 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

bma (>=0.2.0a1, <=0.2.0a2), django-daiquiri (>=1.3.0.dev0, <=1.3.1) +8 more potentially affected by CVE-2025-65431 via django-allauth (>=65.0.0, <=65.12.1)

django-allauth PYPI version =65.0.0, =0.2.0a1, =1.3.0.dev0, =1.0.3, =0.3.8, =4.0.0rc2, =0.163.0, =2.0.0, =1.0.0, =5.0.0, =5.0.1 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

django-allauth-d120 (>=0.0.1, <=0.0.2) potentially affected by CVE-2025-65431 via django-allauth (0.40.0)

django-allauth PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - django-allauth-d120 =0.0.1, =0.0.2 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

openwisp-users (>=0.1.0, <=0.1.3) potentially affected by CVE-2025-65431 via django-allauth (0.31.0)

django-allauth PYPI version 0.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - openwisp-users =0.1.0, =0.1.3 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

planadversity (1.0.2) potentially affected by CVE-2025-65431 via django-allauth (0.24.1)

django-allauth PYPI version 0.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - planadversity 1.0.2 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

django-yabl (>=0.0.1, <=0.0.3), geonode (3.3.3) potentially affected by CVE-2025-65431 via django-allauth (0.47.0)

django-allauth PYPI version 0.47.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - django-yabl =0.0.1, =0.0.3 - geonode 3.3.3 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

speedpycom (>=0.1.0, <=0.1.5) potentially affected by CVE-2025-65431 via django-allauth (0.49.0)

django-allauth PYPI version 0.49.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - speedpycom =0.1.0, =0.1.5 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

django-allauth-d120 (0.0.4), django-cast (>=0.1.29, <=0.1.35) +5 more potentially affected by CVE-2025-65431 via django-allauth (0.42.0)

django-allauth PYPI version 0.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - django-allauth-d120 0.0.4 - django-cast =0.1.29, =0.2.8, =0.1.1, =0.4.0, =0.3.0, =0.5.0 Source cves: CVE-2025-65431 Source advisory...

df-site (0.1.0), grooveshop-django-api (>=0.156.0, <=0.162.2) +1 more potentially affected by CVE-2025-65431 via django-allauth (64.2.1)

django-allauth PYPI version 64.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - df-site 0.1.0 - grooveshop-django-api =0.156.0, =0.162.2 - ov-wag 0.7.0 Source cves: CVE-2025-65431 Source advisory:...

grooveshop-django-api (>=0.38.0, <=0.40.2) potentially affected by CVE-2025-65431 via django-allauth (0.58.1)

django-allauth PYPI version 0.58.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - grooveshop-django-api =0.38.0, =0.40.2 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

grooveshop-django-api (>=0.36.0, <=0.37.4) potentially affected by CVE-2025-65431 via django-allauth (0.58.0)

django-allauth PYPI version 0.58.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - grooveshop-django-api =0.36.0, =0.37.4 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

aleksis (>=2023.1.0b0, <=2023.6.0b1), aleksis-app-alsijil (>=2.0.0a3.dev0, <=2.0.0rc7.post0) +11 more potentially affected by CVE-2025-65431 via django-allauth (0.53.1)

django-allauth PYPI version 0.53.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - aleksis =2023.1.0b0, =2.0.0a3.dev0, =1.0.7.dev0, =2.0.0b0, =2.0.0b0, =2.0.0b0, =2.0.0b0, =2.0.0a1, =1.0.0, =2.0.0b0, =3.0.0b3,...

dj-core-drf (>=0.0.4, <=0.0.8), openwisp-users (>=0.1.5, <=0.1.6) +1 more potentially affected by CVE-2025-65431 via django-allauth (0.33.0)

django-allauth PYPI version 0.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.4, =0.1.5, =0.0.6, =0.0.12 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

django-zero (0.1.0) potentially affected by CVE-2025-65431 via django-allauth (0.43.0)

django-allauth PYPI version 0.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - django-zero 0.1.0 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...