CVE-2025-65430

The django-allauth package is vulnerable to Insufficient Session Expiration (CWE-613) due to improper handling of access and refresh tokens. In versions prior to 65.13.0 , marking a user account as is_active=False had no effect on tokens already issued while the account was still active. This all...