PyPI/djoser CVE-2024-21543: high 7.1, EPSS 0.55%

djoser Authentication Bypass

Action: Upgrade djoser to 2.3.0 or later.

pip install djoser==2.3.0

Affected

Fixed versions

Sources

• osv: GHSA-v49p-m6gh-747c
• https://nvd.nist.gov/vuln/detail/CVE-2024-21543
• https://github.com/sunscrapers/djoser/issues/795
• https://github.com/sunscrapers/djoser/pull/819
• https://github.com/sunscrapers/djoser/commit/d33c3993c0c735f23cbedc60fa59fce69354f19d
• https://github.com/pypa/advisory-database/tree/main/vulns/djoser/PYSEC-2024-158.yaml
• https://github.com/sunscrapers/djoser
• https://github.com/sunscrapers/djoser/releases/tag/2.3.0
• https://lists.debian.org/debian-lts-announce/2025/02/msg00023.html
• https://security.snyk.io/vuln/SNYK-PYTHON-DJOSER-8366540

CVE-2024-21543 · published 2024-12-13T06:30:58Z · modified 2025-02-21T16:41:32.920740Z · JSON