django-nopassword before 5.0.0 stores cleartext secrets in the database.
mitre·CWE-312·Published 2020-03-18