python313-django-allauth-65.19.4-1.1 on GA media (moderate)

python313-django-allauth-65.19.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11903-1 Rating: moderate Cross-References: CVE-2026-97764 CVSS scores: CVE-2026-97764 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

OPENSUSE-SU-2026:11903-1 python313-django-allauth-65.19.4-1.1 on GA media

These are all security issues fixed in the python313-django-allauth-65.19.4-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

DEBIAN-CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

UBUNTU-CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

aleksis (>=2022.6.0.post0, <=2023.6.1), aleksis-app-alsijil (>=2.0.0a3.dev0, <=3.0.1) +99 more potentially affected by CVE-2026-97764 via django-allauth (>=0.31.0, <=65.19.0)

django-allauth PYPI version =0.31.0, =2022.6.0.post0, =2.0.0a3.dev0, =1.0.0, =2.0.0b0, =2.1.0, =2.0.0b0, =1.0.0.dev0, =0.1.0, =2.0.0b1.post0, =2.0.0b0, =0.1.0, =2.0.0b0, =1.0.0, =0.1.1, =2.0.0.dev0, =2.0.0.dev2 and more Source cves: CVE-2026-97764 Source advisory: SNYK:PYTHON-DJANGOALLAUTH-201583...

Brute Force

Overview django-allauth is an integrated set of Django applications addressing authentication, registration, account management as well as 3rd party social account authentication. Affected versions of this package are vulnerable to Brute Force in the failed login attempt rate-limiting logic, an...

aleksis (>=2022.6.0.post0, <=2023.6.1), aleksis-app-alsijil (>=2.0.0a3.dev0, <=3.0.1) +99 more potentially affected by CVE-2026-97764 via django-allauth (>=0.31.0, <=65.19.0)

django-allauth PYPI version =0.31.0, =2022.6.0.post0, =2.0.0a3.dev0, =1.0.0, =2.0.0b0, =2.1.0, =2.0.0b0, =1.0.0.dev0, =0.1.0, =2.0.0b1.post0, =2.0.0b0, =0.1.0, =2.0.0b0, =1.0.0, =0.1.1, =2.0.0.dev0, =2.0.0.dev2 and more Source cves: CVE-2026-97764 Source advisory: MEND:CVE-2026-97764...

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

CVE-2026-97764

The django-allauth library, in versions before 65.19.4 , contains a vulnerability where failed login attempt limits are not properly enforced. In certain common configurations, an attacker can exploit the way the system handles diacritics (such as accents) to bypass these limits, allowing for a h...

EUVD-2026-86517

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

PT-2026-98353

Name of the Vulnerable Software and Affected Versions django-allauth versions prior to 65.19.4 Description In certain common configurations, the software fails to enforce expected limits on failed login attempts. An attacker can bypass these restrictions by leveraging the handling of diacritics,...

CVE-2026-97764: Incorrect Behavior Order: Validate Before Canonicalize

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

Linux Distros Unpatched Vulnerability : CVE-2026-97764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the...

OPENSUSE-SU-2026:11570-1 python313-django-allauth-65.19.1-1.1 on GA media

These are all security issues fixed in the python313-django-allauth-65.19.1-1.1 package on the GA media of openSUSE Tumbleweed...