Vulnerabilities for djangorestframework

First version without a known vulnerability: 3.17.2

Details

• GHSA-2m8g-3cmr-wg3w2026-09-01

  Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`

  Fixed in: 3.17.2

• GHSA-g47c-3xmw-q6m22026-09-01

  Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests

  Fixed in: 3.17.2

• GHSA-gw84-84pc-xp822024-06-26

  Cross-site Scripting in djangorestframework

  Fixed in: 3.15.2

• GHSA-fx83-3ph3-9j2q2021-03-19

  Cross-site Scripting (XSS) in Django REST Framework

  Fixed in: 3.11.2