https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:37:04.114105+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-218527 EUVD-2026-218527 2026-10-10T14:37:04.118619+00:00 EUVD-2026-218527 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21543 fkie_cve-2024-21543 2026-10-10T14:37:04.118661+00:00

Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, granting access to users with valid credentials, and eventually bypassing custom authentication checks such as two-factor authentication, LDAP validations, or requirements from configured AUTHENTICATION_BACKENDS.

 https://cve.radiocsirt.org/vuln/ghsa-v49p-m6gh-747c GHSA-v49p-m6gh-747c — djoser Authentication Bypass 2026-10-10T14:37:04.118707+00:00

Affected: PyPI: djoser

Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, granting access to users with valid credentials, and eventually bypassing custom authentication checks such as two-factor authentication, LDAP validations, or requirements from configured AUTHENTICATION_BACKENDS.

 https://cve.radiocsirt.org/vuln/gsd-2024-21543 gsd-2024-21543 2026-10-10T14:37:04.118747+00:00 gsd-2024-21543 https://cve.radiocsirt.org/vuln/pysec-2024-158 PYSEC-2024-158 2026-10-10T14:37:04.118766+00:00

Affected: PyPI: djoser

Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, granting access to users with valid credentials, and eventually bypassing custom authentication checks such as two-factor authentication, LDAP validations, or requirements from configured AUTHENTICATION_BACKENDS.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-21543 UBUNTU-CVE-2024-21543 2026-10-10T14:37:04.118801+00:00

Affected: Ubuntu:Pro:20.04:LTS: djoser, Ubuntu:22.04:LTS: djoser, Ubuntu:24.04:LTS: djoser

Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, granting access to users with valid credentials, and eventually bypassing custom authentication checks such as two-factor authentication, LDAP validations, or requirements from configured AUTHENTICATION_BACKENDS.