DJ
Product
django-rest-framework
6
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 3Medium 3Low 0
Watch
Add django-rest-framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-25626 | 6.1 | Sep 30 | A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2 Affected: before 3.12.0 |
| CVE-2026-73228 | 5.3 | Aug 11 | Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data` Affected: < 3.17.2 |
| CVE-2026-73229 | 4.3 | Aug 11 | Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests Affected: < 3.17.2 |
Showing 3