PyPI/django-rest-framework CVE-2018-25045: medium 6.1, EPSS 0.78%

Django REST framework XSS Vulnerability

Action: Upgrade django-rest-framework to 3.9.1 or later.

pip install django-rest-framework==3.9.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-804
• https://nvd.nist.gov/vuln/detail/CVE-2018-25045
• https://github.com/encode/django-rest-framework/pull/6191
• https://github.com/encode/django-rest-framework/pull/6330
• https://github.com/encode/django-rest-framework/commit/4bb9a3c48427867ef1e46f7dee945a4c25a4f9b8
• https://github.com/encode/django-rest-framework
• https://pypi.org/project/django-rest-framework
• https://github.com/advisories/GHSA-xqcf-hj92-967m

CVE-2018-25045 · published 2026-07-06T08:03:31.459915Z · modified 2026-07-07T11:45:45.020324295Z · JSON