We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2026-27982

CVE-2026-27982

Django

Severity: MEDIUM
CVSS: 6.1CVSS
Published: 2026-03-05
Last modified: 2026-03-09
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE: CWE-601

Description

An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker to redirect users to an arbitrary external website via a crafted URL.

References

https://allauth.org/news/2026/02/django-allauth-65.14.1-released/
https://jvn.jp/en/jp/JVN23669411/

Summary

Description

References