Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Satellite 6/python-djangorestframework
Red Hat
· Package
5 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Django REST framework: TokenProxy.delete() reports success and revokes nothing
CVE-2026-114137 · GHSA-XW6W-GCFP-CF8M
djangorestframework
Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8
PyPI
Red Hat
High
Fix reported
2026-10-22
Django REST framework: JSONParser applies an attacker-named codec to the request stream
CVE-2026-114136 · GHSA-3547-9M27-7RXG
djangorestframework
Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8
PyPI
Red Hat
High
Fix reported
2026-10-22
Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation
CVE-2026-114138 · GHSA-33WH-FXXF-88VV
djangorestframework
Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8
PyPI
Red Hat
High
Fix reported
2026-10-22
Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`
CVE-2026-73228 · GHSA-2M8G-3CMR-WG3W
Version ranges need review.
djangorestframework
Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8
PyPI
Red Hat
Medium
Fix reported
2026-09-10
Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests
CVE-2026-73229 · GHSA-G47C-3XMW-Q6M2
Version ranges need review.
djangorestframework
Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8
PyPI
Red Hat
Medium
Fix reported
2026-09-10
