Package · PyPI

djangorestframework

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.1

CVE-2024-21520 Public exploit

Cross-site Scripting in djangorestframework

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

djangorestframework djangorestframework djangorestframework Debian Ubuntu PyPI

Jun 26, 2024