{"action":"Upgrade djoser to 2.3.0 or later.","affected":[{"fixed":"2.3.0","introduced":"0"}],"component":"djoser","cve_ids":["CVE-2024-21543"],"ecosystem":"PyPI","epss":0.00546,"exploited":false,"fixed_versions":["2.3.0"],"ghsa_id":"GHSA-v49p-m6gh-747c","id":"tcs_01M5KFZ4YDW5F7FFFQGE09CANN","modified_at":"2025-02-21T16:41:32.920740Z","published_at":"2024-12-13T06:30:58Z","references":["https://osv.dev/vulnerability/GHSA-v49p-m6gh-747c","https://nvd.nist.gov/vuln/detail/CVE-2024-21543","https://github.com/sunscrapers/djoser/issues/795","https://github.com/sunscrapers/djoser/pull/819","https://github.com/sunscrapers/djoser/commit/d33c3993c0c735f23cbedc60fa59fce69354f19d","https://github.com/pypa/advisory-database/tree/main/vulns/djoser/PYSEC-2024-158.yaml","https://github.com/sunscrapers/djoser","https://github.com/sunscrapers/djoser/releases/tag/2.3.0","https://lists.debian.org/debian-lts-announce/2025/02/msg00023.html","https://security.snyk.io/vuln/SNYK-PYTHON-DJOSER-8366540"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-v49p-m6gh-747c","url":"https://osv.dev/vulnerability/GHSA-v49p-m6gh-747c"}],"summary":"djoser Authentication Bypass"}