BSD-3-Clause
All Versions
Vulnerabilities (Public)
Known vulnerabilities and security issues detected in the extension's dependencies and code.
| Vulnerability ID | Advisory | Affected Versions | |||
|---|---|---|---|---|---|
| CVE-2026-114137 | djangorestframework – Detection of Error Condition Without Action | High | – | – | >= 3.12.0, < 3.18.2 |
| CVE-2026-114138 | djangorestframework – Inefficient Algorithmic Complexity | High | – | – | < 3.18.2 |
| CVE-2026-114136 | djangorestframework – Improper Handling of Highly Compressed Data (Data Amplification) | High | – | – | >= 3.6.4, < 3.18.2 |
| CVE-2026-73228 | djangorestframework – Denial of Service (DoS) | Medium | – | – | < 3.17.2 |
| CVE-2026-73229 | djangorestframework – Information Disclosure | Medium | – | – | <= 3.17.1 |
| CVE-2018-25045 | Djangorestframework 3.9.1 includes a fix for an XSS vulnerability. https://github.com/encode/django-rest-framework/commit/4bb9a3c48427867ef1e46f7dee945a4c25a4f9b8 | Medium | – | – | <3.9.1 |
| CVE-2020-25626 | A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come f… | Medium | – | – | <3.11.2 |
| CVE-2024-21520 | Affected versions of the package djangorestframework are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joi… | Low | – | – | <3.15.2 |
Safety Discovered Vulnerabilities
Additional security issues found by Safety, exclusive to our platform.