django-rest-framework vulnerabilities
CVEs whose affected-version data names the django-rest-framework package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-114137High· 7.4Django REST framework: TokenProxy.delete() reports success and revokes nothing
Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framework/authtoken/models.py uses the proxy's user-id pk while the concrete Token token-string primary key identifies rows, …
▾ Twilightencode · django-rest-frameworkEPSS 0.47%via CVEORG
CVE-2018-25045Medium· 6.1Django REST framework XSS Vulnerability
Django REST framework XSS Vulnerability
▾ Sunlitdjango-rest-framework · django-rest-frameworkEPSS 0.78%via OSV