CVE-2024-21520
2 advisories.
PyPI/djangorestframework CVE-2024-21520: medium 6.1, EPSS 1.13%
Cross-site Scripting in djangorestframework
Action: Upgrade djangorestframework to 3.15.2 or later.
pip install djangorestframework==3.15.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.15.2 | - |
Fixed versions
| 3.15.2 |
Sources
- osv: GHSA-gw84-84pc-xp82
- https://nvd.nist.gov/vuln/detail/CVE-2024-21520
- https://github.com/encode/django-rest-framework/pull/9435
- https://github.com/encode/django-rest-framework/commit/3b41f0124194430da957b119712978fa2266b642
- https://github.com/encode/django-rest-framework
- https://github.com/encode/django-rest-framework/compare/3.15.1...3.15.2
- https://security.snyk.io/vuln/SNYK-PYTHON-DJANGORESTFRAMEWORK-7252137
CVE-2024-21520 · published · modified · JSON
PyPI/djangorestframework CVE-2024-21520: medium 6.1, EPSS 1.13%
Cross-site Scripting in djangorestframework
Action: Upgrade djangorestframework to 3.15.2 or later.
pip install djangorestframework==3.15.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.15.2 | - |
Fixed versions
| 3.15.2 |
Sources
- osv: PYSEC-2026-1304
- https://nvd.nist.gov/vuln/detail/CVE-2024-21520
- https://github.com/encode/django-rest-framework/pull/9435
- https://github.com/encode/django-rest-framework/commit/3b41f0124194430da957b119712978fa2266b642
- https://github.com/encode/django-rest-framework
- https://github.com/encode/django-rest-framework/compare/3.15.1...3.15.2
- https://security.snyk.io/vuln/SNYK-PYTHON-DJANGORESTFRAMEWORK-7252137
- https://pypi.org/project/djangorestframework
- https://github.com/advisories/GHSA-gw84-84pc-xp82
CVE-2024-21520 · published · modified · JSON