Known vulnerabilities in django-rest-framework

Vendor: Encode
Software CPE: cpe:2.3:a:encode:django-rest-framework:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting django-rest-framework django-rest-framework is affected by 7 known vulnerabilities: 4 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153876 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-114136
CWE-409 Medium
No
No
3.18.2 07.10.2026 SB20261007220
#VU153875 - Detection of error condition without action
CVE-2026-114137
CWE-390 Medium
No
No
3.18.2 07.10.2026 SB20261007220
#VU153874 - Inefficient Algorithmic Complexity
CVE-2026-114138
CWE-407 Medium
No
No
3.18.2 07.10.2026 SB20261007220
#VU153873 - Exposure of sensitive information to an unauthorized actor
CVE-2026-73229
CWE-200 Low
No
No
3.17.1 07.10.2026 SB20261007219
#VU153872 - Allocation of Resources Without Limits or Throttling
CVE-2026-73228
CWE-770 Medium
No
No
3.17.1 07.10.2026 SB20261007219
#VU97956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-21520
CWE-79 Low
No
No
3.15.2 02.10.2024 SB2024100232
SB2024100251
SB2024102832
#VU47245 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-25626
CWE-79 Low
No
No
3.11.2, 3.12.0 30.09.2020 SB2020100114
SB2020100115
SB2022072402
and 2 more