52 matches found
OPENSUSE-SU-2026:11903-1 python313-django-allauth-65.19.4-1.1 on GA media
These are all security issues fixed in the python313-django-allauth-65.19.4-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE CVE-2026-97764
django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...
DEBIAN-CVE-2026-97764
django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...
CVE-2026-97764
django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...
UBUNTU-CVE-2026-97764
django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...
Brute Force
Overview django-allauth is an integrated set of Django applications addressing authentication, registration, account management as well as 3rd party social account authentication. Affected versions of this package are vulnerable to Brute Force in the failed login attempt rate-limiting logic, an...
CVE-2026-97764
django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...
CVE-2026-97764
The django-allauth library, in versions before 65.19.4 , contains a vulnerability where failed login attempt limits are not properly enforced. In certain common configurations, an attacker can exploit the way the system handles diacritics (such as accents) to bypass these limits, allowing for a h...
CVE-2026-97764
django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...
CVE-2026-97764
django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...
EUVD-2026-86517
django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...
CVE-2026-97764: Incorrect Behavior Order: Validate Before Canonicalize
django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...
Linux Distros Unpatched Vulnerability : CVE-2026-97764
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the...
OPENSUSE-SU-2026:11570-1 python313-django-allauth-65.19.1-1.1 on GA media
These are all security issues fixed in the python313-django-allauth-65.19.1-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-80618
These are all security issues fixed in the python313-django-allauth-65.19.1-1.1 package on the GA media of openSUSE Tumbleweed...
[SECURITY] Fedora 44 Update: python-django-allauth-65.18.0-1.fc44
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party social account authentication. Most existing Django apps that address the problem of social authentication focus on just that. You typically need to integrate another app in orde...
Fedora 44 : python-django-allauth (2026-2c5cde060d)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2c5cde060d advisory. Update to the latest django-allauth Fixes CVE-2026-27982 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...
OPENSUSE-SU-2026:10680-1 python311-django-allauth-65.16.1-2.1 on GA media
These are all security issues fixed in the python311-django-allauth-65.16.1-2.1 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2026-27982
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled it is disabled by default, which may...
Open Redirect
Overview django-allauth is an integrated set of Django applications addressing authentication, registration, account management as well as 3rd party social account authentication. Affected versions of this package are vulnerable to Open Redirect via the SAML IDP-initiated SSO process. An attacker...