Medium severity6.1NVD Advisory· Published Mar 5, 2026· Updated Jun 17, 2026
CVE-2026-27982
CVE-2026-27982
Description
An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker to redirect users to an arbitrary external website via a crafted URL.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
django-allauthPyPI | < 65.14.1 | 65.14.1 |
Affected products
3- Range: prior to 65.14.1
Patches
Vulnerability mechanics
References
7- github.com/advisories/GHSA-2jpr-83rg-v67jghsaADVISORY
- jvn.jp/en/jp/JVN23669411/nvdThird Party Advisory
- nvd.nist.gov/vuln/detail/CVE-2026-27982ghsaADVISORY
- allauth.org/news/2026/02/django-allauth-65.14.1-releasedghsaWEB
- allauth.org/news/2026/02/django-allauth-65.14.1-released/nvdRelease Notes
- github.com/pypa/advisory-database/tree/main/vulns/django-allauth/PYSEC-2026-56.yamlghsaWEB
- jvn.jp/en/jp/JVN23669411ghsaWEB
News mentions
0No linked articles in our index yet.