{"action":"Upgrade social-auth-app-django to 5.6.0 or later.","affected":[{"fixed":"5.6.0","introduced":"0"}],"component":"social-auth-app-django","cve_ids":["CVE-2025-61783"],"ecosystem":"PyPI","epss":0.00542,"exploited":false,"fixed_versions":["5.6.0"],"ghsa_id":"GHSA-wv4w-6qv2-qqfg","id":"tcs_01M5KGWHFM38Y7M0WB8NRKEGG5","modified_at":"2026-07-07T17:47:08.745637805Z","published_at":"2026-07-07T16:03:07.216989Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1932","https://github.com/python-social-auth/social-app-django/security/advisories/GHSA-wv4w-6qv2-qqfg","https://nvd.nist.gov/vuln/detail/CVE-2025-61783","https://github.com/python-social-auth/social-app-django/issues/220","https://github.com/python-social-auth/social-app-django/issues/231","https://github.com/python-social-auth/social-app-django/issues/634","https://github.com/python-social-auth/social-app-django/pull/803","https://github.com/python-social-auth/social-app-django/commit/10c80e2ebabeccd4e9c84ad0e16e1db74148ed4c","https://github.com/python-social-auth/social-app-django","https://pypi.org/project/social-auth-app-django","https://github.com/advisories/GHSA-wv4w-6qv2-qqfg"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-1932","url":"https://osv.dev/vulnerability/PYSEC-2026-1932"},{"source":"nvd","source_id":"CVE-2025-61783","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61783"}],"summary":"Python Social Auth - Django has unsafe account association"}