What’s Vulnerable › Products

encode django-rest-framework vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your encode django-rest-framework version is affected

Latest encode django-rest-framework vulnerabilities

• CVE-2026-114138 — Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation (CVSS 7.5)
• CVE-2026-114137 — Django REST framework: TokenProxy.delete() reports success and revokes nothing (CVSS 7.4)
• CVE-2026-114136 — Django REST framework: JSONParser applies an attacker-named codec to the request stream (CVSS 7.5)
• CVE-2026-73229 — Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests (CVSS 4.3)
• CVE-2026-73228 — Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data` (CVSS 5.3)