CVE-2026-97764
django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacrit…
Published: 2026-09-25 · CVSS: 3.7 · CVSS 3.1
django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics (e.g., accents) for a higher effective limit.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7