djangorestframework vulnerabilities (PyPI)
7 vulnerabilities.
-
djangorestframeworkPyPI Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation 7.5 High -
djangorestframeworkPyPI Django REST framework: TokenProxy.delete() reports success and revokes nothing 7.4 High -
djangorestframeworkPyPI Django REST framework: JSONParser applies an attacker-named codec to the request stream 7.5 High -
djangorestframeworkPyPI Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests 4.3 Medium -
djangorestframeworkPyPI Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data` 5.3 Medium -
djangorestframeworkPyPI Cross-site Scripting in djangorestframework 5.3 Medium -
djangorestframeworkPyPI Cross-site Scripting (XSS) in Django REST Framework 6.1 Medium