{"action":"Upgrade social-auth-app-django to 5.6.0 or later.","affected":[{"fixed":"5.6.0","introduced":"0"}],"component":"social-auth-app-django","cve_ids":["CVE-2025-61783"],"ecosystem":"PyPI","epss":0.00542,"exploited":false,"fixed_versions":["5.6.0"],"ghsa_id":"GHSA-wv4w-6qv2-qqfg","id":"tcs_01M5KG2W3BCJEFFATRA791HTGT","modified_at":"2026-07-07T17:57:30.314209096Z","published_at":"2025-10-09T17:08:05Z","references":["https://osv.dev/vulnerability/GHSA-wv4w-6qv2-qqfg","https://github.com/python-social-auth/social-app-django/security/advisories/GHSA-wv4w-6qv2-qqfg","https://nvd.nist.gov/vuln/detail/CVE-2025-61783","https://github.com/python-social-auth/social-app-django/issues/220","https://github.com/python-social-auth/social-app-django/issues/231","https://github.com/python-social-auth/social-app-django/issues/634","https://github.com/python-social-auth/social-app-django/pull/803","https://github.com/python-social-auth/social-app-django/commit/10c80e2ebabeccd4e9c84ad0e16e1db74148ed4c","https://github.com/python-social-auth/social-app-django"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-wv4w-6qv2-qqfg","url":"https://osv.dev/vulnerability/GHSA-wv4w-6qv2-qqfg"},{"source":"nvd","source_id":"CVE-2025-61783","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61783"}],"summary":"Python Social Auth - Django has unsafe account association"}