PyPI: djoser

SFTY-20210414-78386

Safety legacy ID: pyup.io-36711

Djoser versions below 1.3.2 are vulnerable to Authentication Bypass, where a malicious user could update another user's information using their user token because permissions checks are missing. https://github.com/sunscrapers/djoser/commit/73b84926d9566df12d48245b06c5d5c986bbb272

PythonPyPI
Created at: Jul 14, 2026Updated at: Jul 14, 2026

Overview

Djoser versions below 1.3.2 are vulnerable to Authentication Bypass, where a malicious user could update another user's information using their user token because permissions checks are missing. https://github.com/sunscrapers/djoser/commit/73b84926d9566df12d48245b06c5d5c986bbb272

Advisory

Djoser versions below 1.3.2 are vulnerable to Authentication Bypass, where a malicious user could update another user's information using their user token because permissions checks are missing. https://github.com/sunscrapers/djoser/commit/73b84926d9566df12d48245b06c5d5c986bbb272

Affected Package

Affecting djoser package, versions<1.3.2

Also affects

---

How to Fix

Upgradedjoserto1.3.3or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

Safety

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more