Executive brief
Cross-site Scripting in djangorestframework
Affected products
- PyPI djangorestframework
Junglewise Threat Intelligence
CVE-2024-21520: PYSEC-2026-1304 - Cross-site Scripting in djangorestframework
CVE-2024-21520 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: djangorestframework (PyPI). Vendors: PyPI.
Related threats
- Django REST framework AdminRenderer permission bypass information disclosure
- Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing in rest_framework/re
- PYSEC-2020-263 - A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framew