https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T03:50:08.510553+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04357 bdu:2024-04357 2026-10-23T03:50:08.547716+00:00 bdu:2024-04357 https://cve.radiocsirt.org/vuln/euvd-2026-199018 EUVD-2026-199018 2026-10-23T03:50:08.547764+00:00 EUVD-2026-199018 https://cve.radiocsirt.org/vuln/fkie_cve-2024-22513 fkie_cve-2024-22513 2026-10-23T03:50:08.547779+00:00

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.

 https://cve.radiocsirt.org/vuln/ghsa-5vcc-86wm-547q GHSA-5vcc-86wm-547q — Improper Privilege Management in djangorestframework-simplejwt 2026-10-23T03:50:08.547810+00:00

Affected: PyPI: djangorestframework-simplejwt

djangorestframework-simplejwt before version 5.5.1 is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.

 https://cve.radiocsirt.org/vuln/gsd-2024-22513 gsd-2024-22513 2026-10-23T03:50:08.547834+00:00 gsd-2024-22513 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15699-1 openSUSE-SU-2025:15699-1 — python311-djangorestframework-simplejwt-5.5.1-1.1 on GA media 2026-10-23T03:50:08.547846+00:00

python311-djangorestframework-simplejwt-5.5.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2026-1305 PYSEC-2026-1305 — Improper Privilege Management in djangorestframework-simplejwt 2026-10-23T03:50:08.547863+00:00

Affected: PyPI: djangorestframework-simplejwt

djangorestframework-simplejwt before version 5.5.1 is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-22513 UBUNTU-CVE-2024-22513 2026-10-23T03:50:08.547881+00:00

Affected: Ubuntu:22.04:LTS: python-djangorestframework-simplejwt, Ubuntu:24.04:LTS: python-djangorestframework-simplejwt, Ubuntu:25.10: python-djangorestframework-simplejwt, Ubuntu:26.10: python-djangorestframework-simplejwt, Ubuntu:26.04:LTS: python-djangorestframework-simplejwt

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.