PatchTheCVEallauth vulnerabilities and fixes
Recent CVEs affecting allauth, with upgrade or downgrade steps. 3 tracked.
allauth has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-03-05. Highest priority: CVE-2026-27982 (score 23/100).
- CVE-2025-65430 MEDIUM 5.4 UPGRADE An issue was discovered in allauth-django before 65.13.0
- CVE-2025-65431 MEDIUM 5.4 UPGRADE An issue was discovered in allauth-django before 65.13.0
- CVE-2026-27982 MEDIUM 6.1 UPGRADE An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO
FAQ
How do I fix allauth vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is allauth being exploited right now?
None of the tracked allauth CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which allauth CVE should I patch first?
CVE-2026-27982 currently ranks highest (23/100): An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO .