Skip to content
OpenAdvisories

Package · PyPI

drf-jwt

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2020-10594

    Django Rest Framework jwt allows obtaining new token from notionally invalidated token

    An issue was discovered in drf-jwt 1.15.x before 1.15.1. It allows attackers with access to a notionally invalidated token to obtain a new, working token via the refresh endpoint, because the blacklist protection mechanism is incompatible with the token-refre…

    drf-jwt PyPI