Vulnerabilities for django-allauth

First version without a known vulnerability: 65.14.1

Details

• GHSA-2jpr-83rg-v67j2026-03-05

  django-allauth has an open redirect vulnerability

  Fixed in: 65.14.1

• GHSA-8m3c-c723-h4p42025-12-15

  django-allauth's Okta and NetIQ implementations used a mutable identifier for authorization decisions

  Fixed in: 65.13.0

• GHSA-qhmc-3mvr-f2j42025-12-15

  django-allauth does not reject access tokens for inactive users

  Fixed in: 65.13.0