auth-satvadev (>=1.0.0, <=1.0.4), django-learngual (>=0.82.0, <=0.895.0) +10 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.8.0)

djangorestframework-simplejwt PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - auth-satvadev =1.0.0, =0.82.0, =0.2.2, =0.0.1, =1.3.0, =2.0.0b1, =0.1.0, =1.0.0, =1.0.7 Source cves:...

arccanet (>=0.0.1, <=0.0.7), dj-jwt (>=0.0.1, <=0.0.2) +5 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.7.2)

djangorestframework-simplejwt PYPI version 4.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - arccanet =0.0.1, =0.0.1, =0.0.7, =2.0.0, =8.0.0 Source cves: CVE-2024-22513 Source advisory:...

alcali (3006.3.0), auth-lib-services (>=0.0.6, <=0.0.7) +45 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (>=5.0.0, <=5.5.0)

djangorestframework-simplejwt PYPI version =5.0.0, =0.0.6, =0.0.8, =0.0.3, =1.0.0, =0.1.7, =0.4.0, =1.0.1, =1.0.0, =1.0.0, =0.2.1, =1.0.0, =0.1.0, =1.0.1, =0.0.86, =0.0.104 and more Source cves: CVE-2024-22513 Source advisory: OSV:PYSEC-2026-1305...

alcali (>=2018.3.3, <=3003.1.0), django-rework (>=0.2.2, <=0.4.6) +1 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.4.0)

djangorestframework-simplejwt PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - alcali =2018.3.3, =0.2.2, =0.0.9, =0.0.13 Source cves: CVE-2024-22513 Source advisory:...

alcali (>=2018.3.1, <=2019.2.2), human-lambdas (>=1.0.43, <=1.0.51) +2 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.3.0)

djangorestframework-simplejwt PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - alcali =2018.3.1, =1.0.43, =0.3.1, =0.3.3 - uboxadmin 0.1.0 Source cves: CVE-2024-22513 Source advisor...

xdj-datamap (>=0.0.1, <=0.0.5), xdj-oauth (>=0.0.1, <=0.0.3) +2 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.7.1)

djangorestframework-simplejwt PYPI version 4.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - xdj-datamap =0.0.1, =0.0.1, =0.0.3, =0.0.1, =0.0.6 Source cves: CVE-2024-22513 Source advisory:...

Django REST Framework SimpleJWT 5.3.1 Information Disclosure

Exploit Title: djangorestframework-simplejwt 5.3.1 - Information Disclosure Date: 26/01/2024 Exploit Author: Dhrumil Mistry dmdhrumilmistry Vendor Homepage: https://github.com/jazzband/djangorestframework-simplejwt/ Software...

djangorestframework-simplejwt 5.3.1 - Information Disclosure

Exploit Title: djangorestframework-simplejwt 5.3.1 - Information Disclosure Date: 26/01/2024 Exploit Author: Dhrumil Mistry dmdhrumilmistry Vendor Homepage: https://github.com/jazzband/djangorestframework-simplejwt/ Software...

CVE-2024-22513

A flaw was found in djangorestframework-simplejwt. Affected versions of this package are vulnerable to information disclosure. This flaw allows a user to access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

django-restframework-2fa (>=0.0.15, <=0.0.16), los-docusign (0.2.2) +2 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.6.0)

djangorestframework-simplejwt PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - django-restframework-2fa =0.0.15, =0.0.16 - los-docusign 0.2.2 - tea-django 0.0.14 - traktor 0.0.10...

xdj-datamap (>=0.0.1, <=0.0.5), xdj-oauth (>=0.0.1, <=0.0.3) +2 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.7.1)

djangorestframework-simplejwt PYPI version 4.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - xdj-datamap =0.0.1, =0.0.1, =0.0.3, =0.0.1, =0.0.6 Source cves: CVE-2024-22513 Source advisory:...

arccanet (>=0.0.1, <=0.0.7), dj-jwt (>=0.0.1, <=0.0.2) +5 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.7.2)

djangorestframework-simplejwt PYPI version 4.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - arccanet =0.0.1, =0.0.1, =0.0.7, =2.0.0, =8.0.0 Source cves: CVE-2024-22513 Source advisory:...

alcali (3006.3.0), auth-lib-services (>=0.0.6, <=0.0.7) +45 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (>=5.0.0, <=5.5.0)

djangorestframework-simplejwt PYPI version =5.0.0, =0.0.6, =0.0.8, =0.0.3, =1.0.0, =0.1.7, =0.4.0, =1.0.1, =1.0.0, =1.0.0, =0.2.1, =1.0.0, =0.1.0, =1.0.1, =0.0.86, =0.0.104 and more Source cves: CVE-2024-22513 Source advisory: GHSA-5VCC-86WM-547Q...

alcali (>=2018.3.1, <=2019.2.2), human-lambdas (>=1.0.43, <=1.0.51) +2 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.3.0)

djangorestframework-simplejwt PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - alcali =2018.3.1, =1.0.43, =0.3.1, =0.3.3 - uboxadmin 0.1.0 Source cves: CVE-2024-22513 Source advisor...

CVE-2024-22513

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

CVE-2024-22513

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

CVE-2024-22513

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

CVE-2024-22513

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

CVE-2024-22513

The djangorestframework-simplejwt library (versions 5.3.1 and before ) is vulnerable to information disclosure due to missing user validation checks in the for_user method. This allows a user to access web application resources even after their account has been disabled . Exploiting this can lead...

CVE-2024-22513

creationtimestamp| type| source ---|---|--- 2024-02-11 14:18:34+00:00| seen| https://t.me/arpsyndicate/3403 2024-03-16 08:21:54+00:00| seen| https://t.me/ctinow/209407 2024-03-16 08:26:37+00:00| seen| https://t.me/ctinow/209409 2024-03-16 19:31:52+00:00| seen| https://t.me/ctinow/209681...