https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:28:28.587318+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-32879 CVE-2024-32879 — social-auth-app-django Improper Handling of Case Sensitivity vulnerability 2026-10-03T12:28:28.661105+00:00

Affected: python-social-auth social-app-django

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed by a fix released in version 5.4.1. An immediate workaround would be to change collation of the affected field.

 https://cve.radiocsirt.org/vuln/ghsa-2gr8-3wc7-xhj3 GHSA-2gr8-3wc7-xhj3 — social-auth-app-django affected by Improper Handling of Case Sensitivity 2026-10-03T12:28:28.661198+00:00

Affected: PyPI: social-auth-app-django

### Impact Due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match.

### Patches This issue has been addressed by https://github.com/python-social-auth/social-app-django/pull/566 and fix released in 5.4.1.

### Workarounds An immediate workaround would be to change collation of the affected field:

```mysql ALTER TABLE `social_auth_usersocialauth` MODIFY `uid` varchar(255) COLLATE `utf8_bin`; ```

### References This issue was discovered by folks at https://opencraft.com/.