{"action":"Upgrade django-allauth to 65.14.1 or later.","affected":[{"fixed":"65.14.1","introduced":"0"}],"component":"django-allauth","cve_ids":["CVE-2026-27982"],"ecosystem":"PyPI","epss":0.00166,"exploited":false,"fixed_versions":["65.14.1"],"ghsa_id":"GHSA-2jpr-83rg-v67j","id":"tcs_01M5KHC4DH7FZMYW0T8SKKFY93","modified_at":"2026-06-10T17:00:47.735647193Z","published_at":"2026-03-05T06:16:30.100Z","references":["https://osv.dev/vulnerability/PYSEC-2026-56","https://allauth.org/news/2026/02/django-allauth-65.14.1-released/","https://jvn.jp/en/jp/JVN23669411/","https://github.com/advisories/GHSA-2jpr-83rg-v67j"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-56","url":"https://osv.dev/vulnerability/PYSEC-2026-56"}],"summary":"An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker to redirect users to a"}