Lack of data validation - Type confusion In social-auth-app-django
Description
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed by a fix released in version 5.4.1. An immediate workaround would be to change collation of the affected field.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 pypi | 5.4.1 | ||
 debian 11 | - | ||
debian 12 | - | ||
debian 13 | 5.4.1-1 | ||
debian 14 | 5.4.1-1 |
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1. 2. 3.