Security
فارسی
All products

djangorestframework

PyPI · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Django REST framework: TokenProxy.delete() reports success and revokes nothingCVE-2026-114137 · GHSA-XW6W-GCFP-CF8M djangorestframeworkRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
Django REST framework: JSONParser applies an attacker-named codec to the request streamCVE-2026-114136 · GHSA-3547-9M27-7RXG djangorestframeworkRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiationCVE-2026-114138 · GHSA-33WH-FXXF-88VV djangorestframeworkRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`CVE-2026-73228 · GHSA-2M8G-3CMR-WG3WVersion ranges need review. djangorestframeworkRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported
Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requestsCVE-2026-73229 · GHSA-G47C-3XMW-Q6M2Version ranges need review. djangorestframeworkRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported
Cross-site Scripting in djangorestframeworkCVE-2024-21520 · GHSA-GW84-84PC-XP82Version ranges need review. djangorestframeworkRed Hat Ansible Automation Platform 1.2/ansible-tower PyPIRed Hat Low Fix reported
Cross-site Scripting (XSS) in Django REST FrameworkCVE-2020-25626 · GHSA-FX83-3PH3-9J2QVersion ranges need review. djangorestframeworkRed Hat Ceph Storage 2/calamari-server PyPIRed Hat Medium Fix reported