CVE-2026-16207Low· 3.7▾ SunlitA vulnerability was detected in django-tastypie up to 0.15.1. Impacted is the function ApiKeyAuthentication of the file tastypie/authentication.py. The manipulation results in use of get request method with sensitive query strings. The a…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 20.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.4%
0.4% → 0.6%
A vulnerability was detected in django-tastypie up to 0.15.1. Impacted is the function ApiKeyAuthentication of the file tastypie/authentication.py. The manipulation results in use of get request method with sensitive query strings. The attack can be launched remotely. This attack is characterized by high complexity. The exploitability is considered difficult. The project was informed of the problem early through an issue report but has not responded yet.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-113669Medium· 5.3ApostropheCMS: Cross-domain session token in URL confers session takeover
CVE-2026-107370Medium· 5.3When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the authentication transaction with a GET request instead of a POST request
CVE-2026-108808Low· 2.6A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0
CVE-2026-107807High· 8.8Nginx UI is a web user interface for the Nginx web server
CVE-2026-76179Critical· 9.8Ebyte NA111-M Use of GET Request Method With Sensitive Query Strings
CVE-2025-62317Low· 2.6HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters