Skip to content
OpenAdvisories
High DLA-4060-1 1 CVE

djoser - security update

Published Feb 20, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 djoser 2.1.0-1+deb11u1

Vulnerabilities 1

  • High 7.1
    CVE-2024-21543

    djoser Authentication Bypass

    Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, granting access to users with valid credentials, and eventuall…

    djoser djoser djoser Debian Ubuntu PyPI