Skip to content
OpenAdvisories

Product · encode

django-rest-framework

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-73229

    Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests

    Django REST framework is a powerful and flexible toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's rest_framework/renderers.py AdminRenderer.render() uses override_method() to simulate GET and directly invokes view.get() without view.che…

    encode django-rest-framework djangorestframework djangorestframework Debian Ubuntu PyPI
  • Medium 5.3
    CVE-2026-73228

    Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`

    Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing in rest_framework/request.py Request._parse() passes the underlying HttpRequest stream to JSONParser and FormParser for application/json an…

    encode django-rest-framework djangorestframework djangorestframework Debian Ubuntu PyPI