Most recent entries from all

EUVD-2026-207874

fkie_cve-2024-21520

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

GHSA-gw84-84pc-xp82 — Cross-site Scripting in djangorestframework

Affected: PyPI: djangorestframework

gsd-2024-21520

openSUSE-SU-2026:10115-1 — python311-djangorestframework-3.16.1-2.1 on GA media

python311-djangorestframework-3.16.1-2.1 on GA media

PYSEC-2026-1304 — Cross-site Scripting in djangorestframework

Affected: PyPI: djangorestframework

RHSA-2024:7312 — Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

djangorestframework: Cross-site Scripting (XSS) via break_long_headers urllib3: proxy-authorization request header is not stripped during cross-origin redirects python-twisted: Reflected XSS via HTML Injection in Redirect Response

UBUNTU-CVE-2024-21520

Affected: Ubuntu:16.04:LTS: djangorestframework, Ubuntu:18.04:LTS: djangorestframework, Ubuntu:20.04:LTS: djangorestframework, Ubuntu:22.04:LTS: djangorestframework, Ubuntu:24.04:LTS: djangorestframework

WID-SEC-W-2024-2229 — Red Hat Ansible Automation Platform: Mehrere Schwachstellen

Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Ansible Automation Platform ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder vertrauliche Informationen offenzulegen.