Package · PyPI

djangorestframework-simplejwt

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.5

CVE-2024-22513 Public exploit

Improper Privilege Management in djangorestframework-simplejwt

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.

djangorestframework-simplejwt python-djangorestframework-simplejwt python-djangorestframework-simplejwt Debian Ubuntu PyPI

Mar 16, 2024