Cross-site Scripting in djangorestframework

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-21520 · ADVISORY
• encode/django-rest-framework#9435 · WEB
• encode/django-rest-framework commit 3b41f01 · WEB
• encode/django-rest-framework · PACKAGE
• encode/django-rest-framework · WEB
• security.snyk.io/vuln/SNYK-PYTHON-DJANGORESTFRAMEWORK-7252137 · WEB
• pypi.org/project/djangorestframework · PACKAGE
• GitHub Advisory GHSA-gw84-84pc-xp82 · ADVISORY

djangorestframework のその他の脆弱性

• CVE-2026-114138高 7.5Django REST framework is a toolkit for building Web APIs. Prior to 3.18.2, DefaultContentNegotiation.get_accept_list in rest_framework/negot…
• CVE-2026-114137高 7.4Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framework/authtoken/models.p…
• CVE-2026-114136高 7.5Django REST framework is a toolkit for building Web APIs. From 3.6.4 until 3.18.2, JSONParser.parse in rest_framework/parsers.py uses the cl…
• CVE-2026-73229中 4.3Django REST framework is a powerful and flexible toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's rest_framework/rend…
• CVE-2026-73228中 5.3Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing in rest_framework/re…