PyPI - OSV

PYSEC-2026-3827

PyPI/djangorestframework

Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data` 10 Sep

Fix available
Severity - 5.3 (Medium)

PYSEC-2026-3828

PyPI/djangorestframework

Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests 10 Sep

Fix available
Severity - 4.3 (Medium)

GHSA-2m8g-3cmr-wg3w

PyPI/djangorestframework

Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data` 01 Sep

Fix available
Severity - 5.3 (Medium)

GHSA-g47c-3xmw-q6m2

PyPI/djangorestframework

Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests 01 Sep

Fix available
Severity - 4.3 (Medium)

PYSEC-2026-1304

PyPI/djangorestframework

Cross-site Scripting in djangorestframework 07 Jul

Fix available
Severity - 2.1 (Low)

PYSEC-2026-1305

PyPI/djangorestframework-simplejwt

Improper Privilege Management in djangorestframework-simplejwt 07 Jul

Fix available

GHSA-gw84-84pc-xp82

PyPI/djangorestframework

Cross-site Scripting in djangorestframework 26 Jun 2024

Fix available
Severity - 2.1 (Low)

GHSA-5vcc-86wm-547q

PyPI/djangorestframework-simplejwt

Improper Privilege Management in djangorestframework-simplejwt 16 Mar 2024

Fix available

GHSA-fx83-3ph3-9j2q

PyPI/djangorestframework

Cross-site Scripting (XSS) in Django REST Framework 19 Mar 2021

Fix available
Severity - 5.3 (Medium)

PYSEC-2020-263

PyPI/djangorestframework

See record for full details 30 Sep 2020

Fix available

Vulnerabilities