PyPI: djangorestframework

CVE-2018-25045

Safety vulnerability ID: SFTY-20220723-06703

Safety legacy ID: pyup.io-43472

Djangorestframework 3.9.1 includes a fix for an XSS vulnerability. https://github.com/encode/django-rest-framework/commit/4bb9a3c48427867ef1e46f7dee945a4c25a4f9b8

PyPI

NVD

Created at: Jul 5, 2026Updated at: Jul 5, 2026

Overview

Djangorestframework 3.9.1 includes a fix for an XSS vulnerability. https://github.com/encode/django-rest-framework/commit/4bb9a3c48427867ef1e46f7dee945a4c25a4f9b8

Advisory

Djangorestframework 3.9.1 includes a fix for an XSS vulnerability. https://github.com/encode/django-rest-framework/commit/4bb9a3c48427867ef1e46f7dee945a4c25a4f9b8

Affected Package

Affecting djangorestframework package, versions<3.9.1

Also affects

---

How to Fix

Upgradedjangorestframeworkto3.9.1or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

https://getsafety.com/vulnerabilities/SFTY-20220723-06703/CVE-2018-25045

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more