# What changed in django-allauth

> 3 changes in django-allauth 65 from its official release notes, upgrade guides and advisories: 3 security. Each one cited. Sources checked 2026-10-27. HTML: https://unstale.sh/pypi/django-allauth/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## django-allauth 65

### Security

- django-allauth has an open redirect vulnerability (65.14.1) — [security advisory](https://github.com/advisories/GHSA-2JPR-83RG-V67J)
- django-allauth does not reject access tokens for inactive users (65.13.0) — [security advisory](https://github.com/advisories/GHSA-QHMC-3MVR-F2J4)
- django-allauth's Okta and NetIQ implementations used a mutable identifier for authorization decisions (65.13.0) — [security advisory](https://github.com/advisories/GHSA-8M3C-C723-H4P4)