Cross-site Scripting in djangorestframework

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-21520 · ADVISORY
• encode/django-rest-framework#9435 · WEB
• encode/django-rest-framework commit 3b41f01 · WEB
• encode/django-rest-framework · PACKAGE
• encode/django-rest-framework · WEB
• security.snyk.io/vuln/SNYK-PYTHON-DJANGORESTFRAMEWORK-7252137 · WEB
• pypi.org/project/djangorestframework · PACKAGE
• GitHub Advisory GHSA-gw84-84pc-xp82 · ADVISORY

Mais vulnerabilidades de djangorestframework

• CVE-2026-114138ALTO 7.5Django REST framework is a toolkit for building Web APIs. Prior to 3.18.2, DefaultContentNegotiation.get_accept_list in rest_framework/negot…
• CVE-2026-114137ALTO 7.4Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framework/authtoken/models.p…
• CVE-2026-114136ALTO 7.5Django REST framework is a toolkit for building Web APIs. From 3.6.4 until 3.18.2, JSONParser.parse in rest_framework/parsers.py uses the cl…
• CVE-2026-73229MÉDIO 4.3Django REST framework is a powerful and flexible toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's rest_framework/rend…
• CVE-2026-73228MÉDIO 5.3Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing in rest_framework/re…