Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:16:52 +0000 CVE-2026-73228 — Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlenco… https://cve.radiocsirt.org/vuln/cve-2026-73228 <p><strong>Affected:</strong> encode django-rest-framework</p> <p>Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework&#39;s request.data parsing in rest_framework/request.py Request._parse() passes the underlying HttpRequest stream to JSONParser and FormParser for application/json and application/x-www-form-urlencoded bodies, bypassing Django&#39;s DATA_UPLOAD_MAX_MEMORY_SIZE protection and allowing oversized request bodies to consume additional memory and CPU. This issue is fixed in version 3.17.2.</p> <p><strong>Affected:</strong> encode django-rest-framework</p> <p>Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework&#39;s request.data parsing in rest_framework/request.py Request._parse() passes the underlying HttpRequest stream to JSONParser and FormParser for application/json and application/x-www-form-urlencoded bodies, bypassing Django&#39;s DATA_UPLOAD_MAX_MEMORY_SIZE protection and allowing oversized request bodies to consume additional memory and CPU. This issue is fixed in version 3.17.2.</p> https://cve.radiocsirt.org/vuln/cve-2026-73228