encode django-rest-framework vulnerabilities

Newest CVEs

• CVE-2026-114138

  Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation

  encode · django-rest-framework

  High7.5
• CVE-2026-114137

  Django REST framework: TokenProxy.delete() reports success and revokes nothing

  encode · django-rest-framework

  High7.4
• CVE-2026-114136

  Django REST framework: JSONParser applies an attacker-named codec to the request stream

  encode · django-rest-framework

  High7.5
• CVE-2026-73229

  Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests

  encode · django-rest-framework

  Medium4.3
• CVE-2026-73228

  Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`

  encode · django-rest-framework

  Medium5.3