StackRadarChart IndexLive demo

CVE-2025-65431

Medium

Advisory

Published 15 Dec 2025In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.4; base score, highest
EPSS: 0.002; 6th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 19; of 17,781 indexed, latest versions
Container images: 17; deployed by those charts
Fix available: 1 of 1; affected package

django-allauth's Okta and NetIQ implementations used a mutable identifier for authorization decisions

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 17 images.

Affected package	Affected versions	Fixed in	Images
django-allauthpypi	0.45.0, 0.47.0, 0.51.0, 0.61.0+6 more	65.13.0	17

OSV records: GHSA-8m3c-c723-h4p4
Also known as: PYSEC-2025-111

Charts affected

19 by stars

Chart

Latest

Affected images

Radar Score

paperless-ngxalexmorbo-paperless-ngx

1 of 2 See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	django-allauth@65.12.1	65.13.0

Open the chart page →

12,037

paperless-ngxcrystalnet

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	django-allauth@65.0.2	65.13.0

Open the chart page →

13,761

obicogabe565

1 of 3 See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/obico/web :latest	a5c1daef46c0	django-allauth@0.62.1	65.13.0

Open the chart page →

1,965

recipesgeek-cookbook

1 of 2 See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
vabene1111/recipes :1.0.5.2	ec4e9e2905b0	django-allauth@0.47.0	65.13.0

Open the chart page →

7,801

openvaultopenvault

1 of 2 See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
ghcr.io/wgbh-mla/ov-wag :v1.1.0	6df27f944fe8	django-allauth@65.9.0	65.13.0

Open the chart page →

6,873

verbacapverbacap

1 of 1 See more

verbacap verbacap 1.0.7

1 of the 1 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
ghcr.io/mirio/verbacap :v1.5.0	84928e2fc4f2	django-allauth@0.61.1	65.13.0

Open the chart page →

2,233

1 of 1 See more

shynet atrox 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
milesmcc/shynet :v0.12.0	e821e31140f7	django-allauth@0.45.0	65.13.0

Open the chart page →

5,507

cloudlaunchcloudve

1 of 5 See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	django-allauth@0.45.0	65.13.0

Open the chart page →

12,457

cloudlaunch-servercloudve

1 of 5 See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	django-allauth@0.45.0	65.13.0

Open the chart page →

12,131

cloudlaunchservercloudve

1 of 4 See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	django-allauth@0.45.0	65.13.0

Open the chart page →

11,592

galaxykubemancloudve

1 of 7 See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	django-allauth@0.51.0	65.13.0

Open the chart page →

16,069

1 of 10 See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
opencsghq/csgship-web :v0.4.0	c36a5bac3cf0	django-allauth@0.61.0	65.13.0

Open the chart page →

11,335

adventurelogdjjudas21

1 of 3 See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
ghcr.io/seanmorley15/adventurelog-backend :v0.13.0	0250d9cb0d74	django-allauth@0.63.3	65.13.0

Open the chart page →

7,459

tandoorgabe565

1 of 2 See more

tandoor gabe565 0.9.9

1 of the 2 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
ghcr.io/tandoorrecipes/recipes :1.5.31	063eb446e298	django-allauth@0.61.1	65.13.0

Open the chart page →

2,183

shynetjuniorjpdj

1 of 1 See more

shynet juniorjpdj 0.1.30

1 of the 1 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
milesmcc/shynet :v0.13.1	ba54f7797a6b	django-allauth@0.45.0	65.13.0

Open the chart page →

2,581

paperlessk8s-home-lab-repo

1 of 1 See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	django-allauth@65.12.1	65.13.0

Open the chart page →

9,103

paperless-ngxmt190502

1 of 4 See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	django-allauth@65.12.1	65.13.0

Open the chart page →

11,950

paperless-ngxrtomik-helm-charts

1 of 1 See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	django-allauth@65.12.1	65.13.0

Open the chart page →

10,605

tandoorrtomik-helm-charts

1 of 1 See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-65431.

Container image	Digest	Package	Fixed in
vabene1111/recipes :2.3.5	0f8d061895e9	django-allauth@65.9.0	65.13.0

Open the chart page →

4,499

Container images carrying it

17 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	django-allauth@0.45.0	65.13.0	3
galaxy/cloudman-server :latest	e5c265fe9fcd	django-allauth@0.51.0	65.13.0	1
milesmcc/shynet :v0.13.1	ba54f7797a6b	django-allauth@0.45.0	65.13.0	1
milesmcc/shynet :v0.12.0	e821e31140f7	django-allauth@0.45.0	65.13.0	1
opencsghq/csgship-web :v0.4.0	c36a5bac3cf0	django-allauth@0.61.0	65.13.0	1
vabene1111/recipes :2.3.5	0f8d061895e9	django-allauth@65.9.0	65.13.0	1
vabene1111/recipes :1.0.5.2	ec4e9e2905b0	django-allauth@0.47.0	65.13.0	1
ghcr.io/gabe565/obico/web :latest	a5c1daef46c0	django-allauth@0.62.1	65.13.0	1
ghcr.io/mirio/verbacap :v1.5.0	84928e2fc4f2	django-allauth@0.61.1	65.13.0	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	django-allauth@65.0.2	65.13.0	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	django-allauth@65.12.1	65.13.0	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	django-allauth@65.12.1	65.13.0	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	django-allauth@65.12.1	65.13.0	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	django-allauth@65.12.1	65.13.0	1
ghcr.io/seanmorley15/adventurelog-backend :v0.13.0	0250d9cb0d74	django-allauth@0.63.3	65.13.0	1
ghcr.io/tandoorrecipes/recipes :1.5.31	063eb446e298	django-allauth@0.61.1	65.13.0	1
ghcr.io/wgbh-mla/ov-wag :v1.1.0	6df27f944fe8	django-allauth@65.9.0	65.13.0	1