CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/py-django-allauth 65.19.4

User registration with social account authentication

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 65.19.4
Upstream
Higher version available: 65.20.1
Last update
to 65.19.4 · 9d5cc12203
Quarterly
2026Q4: 65.19.4
WWW
https://allauth.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install py312-django-allauth
installs 65.19.4 from latest; from quarterly (2026Q4) 65.19.4
Port
# cd /usr/ports/www/py-django-allauth && make install clean
# make -C /usr/ports/www/py-django-allauth config  # change options first
Size
1.3 MiB download · 11 MiB installed
Depends on
devel/py-pyyaml 6.0.3_1, lang/python312 3.12.15, security/py-fido2 2.2.1, security/py-oauthlib 3.3.1, security/py-python3-openid 3.2.0_2, security/py-python3-saml 1.16.0_2, textproc/py-qrcode 8.2_1, www/py-asgiref 3.12.1, www/py-django52 5.2.18, www/py-pyjwt 2.14.0, www/py-requests 2.34.2
License
MIT
Options
8 of 8 on in the package: HEADLESS HEADLESS_SPEC IDP_OIDC MFA OPENID SAML SOCIALACCOUNT STEAM

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1665.19.465.19.4–
FreeBSD 1565.19.465.19.4–
FreeBSD 1465.19.465.19.465.19.4

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 1565.19.465.19.4–
FreeBSD 1465.19.465.19.465.19.4

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 65.19.4.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-977643.72026-09-25django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of…

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (73)

Kai Knoblich (kai) · 0.39.1
www/py-django-allauth: Update to 0.39.1

* Pet portlint

Changelog since 0.38.0:

* The linkedin_oauth2 provider now gracefully deals with old V1 data that
  might still be present in SocialAccount.extra_data.
* New providers: JupyterHub (OAuth2), Steam (OpenID)
* Refactor translations: Portuguese (Portugal).
* Add testing for Django 2.2 (no code changes required)

Backwards incompatible changes

* linkedin_oauth2: As the LinkedIn V1 API is deprecated, the user info
  endpoint has been moved over to use the API V2. The format of the user
  extra_data is different and the profile picture is absent by default.

https://github.com/pennersr/django-allauth/blob/0.39.1/ChangeLog.rst

PR:		237828
Submitted by:	vladimir.chukharev@gmail.com (maintainer)
94bbc2ab37
Antoine Brodin (antoine) · 0.38.0_1
Remove dependency on the django metaport

With hat:	portmgr
ea86c30f2b
Dmitry Marakasov (amdmi3) · 0.38.0
- Update WWW

Approved by:	portmgr blanket
0775ab008e
Steve Wills (swills) · 0.38.0
www/py-django-allauth: Update to 0.38.0

PR:		232566
Submitted by:	vladimir.chukharev@gmail.com (maintainer)
6e12a7ca23
Mathieu Arnold (mat) · 0.36.0
Use PY_FLAVOR for dependencies.

FLAVOR is the current port's flavor, it should not be used outside of
this scope.

Sponsored by:	Absolight
4376dbbb58
Martin Wilke (miwi) · 0.36.0
- Update to 0.36.0

PR:		228117
Submitted by:	maintainer
Sponsored by:     iXsystems Inc.
36565d6103
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.35.0
Update to 0.35.0

- While I'm here:
  - Update RUN_DEPENDS: use Django metaport (www/py-django)
  - Add missing RUN_DEPENDS

Changes:	https://github.com/pennersr/django-allauth/blob/master/ChangeLog.rst
PR:		226729
Submitted by:	Vladimir Chukharev <Vladimir.Chukharev@gmail.com> (maintainer)
b6efa3fdda
Mathieu Arnold (mat) · 0.34.0
Convert Python ports to FLAVORS.

Ports using USE_PYTHON=distutils are now flavored.  They will
  automatically get flavors (py27, py34, py35, py36) depending on what
  versions they support.

  There is also a USE_PYTHON=flavors for ports that do not use distutils
  but need FLAVORS to be set.  A USE_PYTHON=noflavors can be set if
  using distutils but flavors are not wanted.

  A new USE_PYTHON=optsuffix that will add PYTHON_PKGNAMESUFFIX has been
  added to cope with Python ports that did not have the Python
  PKGNAMEPREFIX but are flavored.

  USES=python now also exports a PY_FLAVOR variable that contains the
  current python flavor.  It can be used in dependency lines when the
  port itself is not python flavored.  For example, deskutils/calibre.

  By default, all the flavors are generated.  To only generate flavors
  for the versions in PYTHON2_DEFAULT and PYTHON3_DEFAULT, define
  BUILD_DEFAULT_PYTHON_FLAVORS in your make.conf.

  In all the ports with Python dependencies, the *_DEPENDS entries MUST
  end with the flavor so that the framework knows which to build/use.
  This is done by appending '@${PY_FLAVOR}' after the origin (or
  @${FLAVOR} if in a Python module with Python flavors, as the content
  will be the same).  For example:

    RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}six>0:devel/py-six@${PY_FLAVOR}

PR:		223071
Reviewed by:	portmgr, python
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D12464
551be3c723
Danilo G. Baio (dbaio) · 0.34.0
www/py-django-allauth: Update to 0.34.0

PR:		223419
Submitted by:	vladimir.chukharev@gmail.com (maintainer)
63d88f81b7
Danilo G. Baio (dbaio) · 0.33.0
www/py-django-allauth: Update to 0.33.0

While here, add LICENSE_FILE.

Changes:	https://github.com/pennersr/django-allauth/blob/master/ChangeLog.rst#0330-2017-08-20

PR:		221958
Submitted by:	vladimir.chukharev@gmail.com (maintainer)
809186a61c
Wen Heping (wen) · 0.32.0
- Update to 0.32.0

PR:		218927
Submitted by:	vladimir.chukharev@gmail.com(maintainer)
eb0f6e815b
Martin Wilke (miwi) · 0.31.0
- Update to 0.31.0

PR:		218480
Submitted by:	maintainer
986e0e29d6
Jason Unovitch (junovitch) · 0.30.0
www/py-django-allauth: update 0.29.0 -> 0.30.0

PR:		215755
Submitted by:	Vladimir Chukharev <vladimir.chukharev@gmail.com> (maintainer)
1f45bb9812
Dmitry Marakasov (amdmi3) · 0.29.0
- Update to 0.29.0

PR:		214846
Submitted by:	Vladimir.Chukharev@gmail.com (maintainer)
121017566b
Bartek Rutkowski (robak) · 0.28.0
www/py-django-allauth: update 0.27.0 -> 0.28.0

PR:		213473
Submitted by:	Vladimir Chukharev <vladimir.chukharev@gmail.com> (maintainer)
08e1b54cea
Pawel Pekala (pawel) · 0.27.0
Update to version 0.27.0

PR:		212963
Submitted by:	vladimir.chukharev@gmail.com (maintainer)
00d1a3e64e
Mathieu Arnold (mat) · 0.25.2
Remove ${PORTSDIR}/ from dependencies, categories v, w, x, y, and z.

With hat:	portmgr
Sponsored by:	Absolight
72ea7e696b
Mark Felder (feld) · 0.25.2
www/py-django-allauth: Update to 0.25.2

0.25.0 (2016-03-12)
* Many providers were added: Reddit, Untappd, GitLab, Stripe,
    Pinterest, Shopify, Draugiem, DigitalOcean, Robinhood, Bitbucket(OAuth2).
* The account connections view is now AJAX aware.
* You can now customize the template extension that is being used to
    render all HTML templates (ACCOUNT_TEMPLATE_EXTENSION)
* In order to be secure by default, users are now blocked from logging
    in after exceeding a maximum number of failed login attempts (see
    ACCOUNT_LOGIN_ATTEMPTS_LIMIT, ACCOUNT_LOGIN_ATTEMPTS_TIMEOUT). Set
    ACCOUNT_LOGIN_ATTEMPTS_LIMIT to None to disable this functionality.
    Important: while this protects the allauth login view, it does not
    protect Django’s admin login from being brute forced.
* New translations: Arabic, Lithuanian

0.25.1 (2016-03-13)
* Bug fix release (AttributeError in password reset view).

0.25.2 (2016-03-13)
* Bug fix release (MemcachedKeyCharacterError: "Control characters not
    allowed")

PR:		207950
0be422f6b7
Martin Wilke (miwi) · 0.24.1_1
- Switch forgotten ports over to py-django18 - Fix PYTHON_PKGNAMEPREFIX

Reported by:    antoinebot
0004cc0c2e
Martin Wilke (miwi) · 0.24.1_1
- Switch all ports to www/py-django18 - Bump PORTREVISION
6332037fce
Rene Ladan (rene) · 0.24.1
www/py-django-allauth: update to 0.24.1

PR:		204752
Submitted by:	myself
Approved by:	maintainer (vladimir.chukharev gmail)
d29b356b63
John Marino (marino) · 0.18.0
www/py-django-allauth: Fix email address

PR:	194756
4ec4c6f2f9
William Grzybowski (wg) · 0.18.0
www/py-django-allauth: User registration with social account authentication

django-allauth is a reusable Django app that allows for both local and
social authentication, with flows that just work.

WWW: http://www.intenct.nl/projects/django-allauth/

PR:		193651
Submitted by:	vladimir.chukharev gmail com
4b37ec8163