CVE-2025-61783

Ecosystem	Package	Version

Vulnerabilities

CVE-2025-61783

Python Social Auth is a social authentication/registration mechanism. In versions prior to 5.6.0, upon authentication, the user could be associated by e-mail even if the `associate_by_email` pipeline was not included. This could lead to account compromise when a third-party authentication service does not validate provided e-mail addresses or doesn't require unique e-mail addresses. Version 5.6.0 contains a patch. As a workaround, review the authentication service policy on e-mail addresses; many will not allow exploiting this vulnerability.

Published Oct 10, 2025

https://github.com/python-social-auth/social-app-django/security/advisories/GHSA-wv4w-6qv2-qqfg

CVSS ScoreMedium

6.3


pypi	compliant-social-app-django	4.0.0
pypi	gupy-framework	0.2.6
pypi	gupy-framework	0.2.7
pypi	gupy-framework	0.2.9
pypi	misago-social-auth-app-django	2.1.0
rpm	ol-automation-manager	1.0.0-1.el8
rpm	ol-automation-manager	1.0.1-1.el8
rpm	ol-automation-manager	1.0.2-1.el8
rpm	ol-automation-manager	2.0.1-2.el8
rpm	ol-automation-manager	2.0.1-3.el8
rpm	ol-automation-manager	2.1.0-10.el8
rpm	ol-automation-manager	2.1.0-13.el8
rpm	ol-automation-manager	2.1.0-14.el8
rpm	ol-automation-manager	2.1.0-15.el8
rpm	ol-automation-manager	2.1.3-16.el8
rpm	ol-automation-manager	2.2.0-19.el8
rpm	ol-automation-manager	2.2.0-25.el8
rpm	ol-automation-manager	2.2.0-31.el8
rpm	ol-automation-manager	2.2.0-33.el8
rpm	ol-automation-manager	2.2.0-34.el8
rpm	ol-automation-manager	2.2.0-38.el8
rpm	ol-automation-manager	2.2.0-41.el8
rpm	ol-automation-manager	2.2.0-43.el8
rpm	ol-automation-manager	2.2.0-44.el8
rpm	ol-automation-manager	2.2.0-45.el8
rpm	ol-automation-manager	2.3.0-15.el8
rpm	ol-automation-manager	2.3.0-16.el9
rpm	ol-automation-manager	2.3.1-2.el8
rpm	ol-automation-manager	2.3.1-2.el9
rpm	ol-automation-manager	2.3.1-3.el8
rpm	ol-automation-manager	2.3.1-3.el9
rpm	ol-automation-manager	2.3.1-4.el8
rpm	ol-automation-manager	2.3.1-4.el9
rpm	ol-automation-manager	2.3.1-5.el8
rpm	python-social-auth-app-django	3.4.0-1.0.2.el8
rpm	python-social-auth-app-django	5.4.1-1.0.1.el8
rpm	python-social-auth-app-django	5.4.2-1.0.1.el8
rpm	python-social-auth-app-django	5.4.2-1.0.1.el9
rpm	python3.11-social-auth-app-django	5.4.1-1.0.1.el8
rpm	python3.11-social-auth-app-django	5.4.2-1.0.1.el8
rpm	python3.11-social-auth-app-django	5.4.2-1.0.1.el9
rpm	python39-social-auth-app-django	3.4.0-1.0.2.el8
pypi	social-auth-app-django	0.0.1
pypi	social-auth-app-django	0.1.0
pypi	social-auth-app-django	1.0.0
pypi	social-auth-app-django	1.0.1
pypi	social-auth-app-django	1.1.0
pypi	social-auth-app-django	1.2.0
pypi	social-auth-app-django	2.0.0
pypi	social-auth-app-django	2.1.0

Ecosystem	Package	Version

CVE-2025-61783 | Components Impacted | Sonatype Guide | Sonatype Guide

Find vulnerabilities. Fix fast with AI.

CVE-2025-61783