https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:36:47.544135+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-29486 cnvd-2021-29486 2026-10-03T15:36:47.550307+00:00 cnvd-2021-29486 https://cve.radiocsirt.org/vuln/euvd-2026-45667 EUVD-2026-45667 2026-10-03T15:36:47.550339+00:00 EUVD-2026-45667 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25626 fkie_cve-2020-25626 2026-10-03T15:36:47.550353+00:00

A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious <script> tags, leading to a cross-site-scripting (XSS) vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-fx83-3ph3-9j2q GHSA-fx83-3ph3-9j2q — Cross-site Scripting (XSS) in Django REST Framework 2026-10-03T15:36:47.550382+00:00

Affected: PyPI: djangorestframework

A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious <script> tags, leading to a cross-site-scripting (XSS) vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2020-25626 gsd-2020-25626 2026-10-03T15:36:47.550407+00:00 gsd-2020-25626 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13861-1 openSUSE-SU-2024:13861-1 — python310-djangorestframework-3.15.1-1.1 on GA media 2026-10-03T15:36:47.550419+00:00

python310-djangorestframework-3.15.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2020-263 PYSEC-2020-263 2026-10-03T15:36:47.550435+00:00

Affected: PyPI: djangorestframework

A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious <script> tags, leading to a cross-site-scripting (XSS) vulnerability.

 https://cve.radiocsirt.org/vuln/rhsa-2020:4136 RHSA-2020:4136 — Red Hat Security Advisory: security update - Red Hat Ansible Tower 3.7.3-1 - RHEL7 Container 2026-10-03T15:36:47.550454+00:00

django-rest-framework: XSS Vulnerability in API viewer

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25626 UBUNTU-CVE-2020-25626 2026-10-03T15:36:47.550468+00:00

Affected: Ubuntu:16.04:LTS: djangorestframework, Ubuntu:18.04:LTS: djangorestframework, Ubuntu:20.04:LTS: djangorestframework, Ubuntu:22.04:LTS: djangorestframework, Ubuntu:24.04:LTS: djangorestframework, Ubuntu:25.10: djangorestframework, Ubuntu:26.04:LTS: djangorestframework

A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious <script> tags, leading to a cross-site-scripting (XSS) vulnerability.