Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation

Django REST framework: JSONParser applies an attacker-named codec to the request stream

Django REST framework: TokenProxy.delete() reports success and revokes nothing

A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2

Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`

Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests