What’s Vulnerable › Vulnerabilities
CVE-2026-27982
- Severity: medium (CVSS 6.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-03-05 · updated 2026-06-17
- Weakness: CWE-601
Description
An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker to redirect users to an arbitrary external website via a crafted URL.
Affected products
- allauth django-allauth: before 65.14.1 — fixed in 65.14.1
How to fix
Upgrade to a fixed version: allauth django-allauth 65.14.1. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-27982 or the next vulnerability affects your stack