https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:00:08 +0000 https://cve.radiocsirt.org/vuln/cve-2024-32879 <p><strong>Affected:</strong> python-social-auth social-app-django</p> <p>Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed by a fix released in version 5.4.1. An immediate workaround would be to change collation of the affected field.</p> <p><strong>Affected:</strong> python-social-auth social-app-django</p> <p>Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed by a fix released in version 5.4.1. An immediate workaround would be to change collation of the affected field.</p> https://cve.radiocsirt.org/vuln/cve-2024-32879 https://cve.radiocsirt.org/vuln/ghsa-2gr8-3wc7-xhj3 <p><strong>Affected:</strong> PyPI: social-auth-app-django</p> <p>### Impact Due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match.</p> <p>### Patches This issue has been addressed by https://github.com/python-social-auth/social-app-django/pull/566 and fix released in 5.4.1.</p> <p>### Workarounds An immediate workaround would be to change collation of the affected field:</p> <p>```mysql ALTER TABLE `social_auth_usersocialauth` MODIFY `uid` varchar(255) COLLATE `utf8_bin`; ```</p> <p>### References This issue was discovered by folks at https://opencraft.com/.</p> <p><strong>Affected:</strong> PyPI: social-auth-app-django</p> <p>### Impact Due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match.</p> <p>### Patches This issue has been addressed by https://github.com/python-social-auth/social-app-django/pull/566 and fix released in 5.4.1.</p> <p>### Workarounds An immediate workaround would be to change collation of the affected field:</p> <p>```mysql ALTER TABLE `social_auth_usersocialauth` MODIFY `uid` varchar(255) COLLATE `utf8_bin`; ```</p> <p>### References This issue was discovered by folks at https://opencraft.com/.</p> https://cve.radiocsirt.org/vuln/ghsa-2gr8-3wc7-xhj3