PT-2025-46076

These are all security issues fixed in the python311-djangorestframework-simplejwt-5.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15699-1 python311-djangorestframework-simplejwt-5.5.1-1.1 on GA media

These are all security issues fixed in the python311-djangorestframework-simplejwt-5.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

Django REST Framework SimpleJWT 5.3.1 Information Disclosure

Exploit Title: djangorestframework-simplejwt 5.3.1 - Information Disclosure Date: 26/01/2024 Exploit Author: Dhrumil Mistry dmdhrumilmistry Vendor Homepage: https://github.com/jazzband/djangorestframework-simplejwt/ Software...

SUSE CVE-2024-22513

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

CVE-2024-22513

A flaw was found in djangorestframework-simplejwt. Affected versions of this package are vulnerable to information disclosure. This flaw allows a user to access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

Improper Privilege Management in djangorestframework-simplejwt

djangorestframework-simplejwt before version 5.5.1 is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

GHSA-5VCC-86WM-547Q Improper Privilege Management in djangorestframework-simplejwt

djangorestframework-simplejwt before version 5.5.1 is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

alcali (3006.3.0), auth-lib-services (>=0.0.6, <=0.0.7) +45 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (>=5.0.0, <=5.5.0)

djangorestframework-simplejwt PYPI version =5.0.0, =0.0.6, =0.0.8, =0.0.3, =1.0.0, =0.1.7, =0.4.0, =1.0.1, =1.0.0, =1.0.0, =0.2.1, =1.0.0, =0.1.0, =1.0.1, =0.0.86, =0.0.104 and more Source cves: CVE-2024-22513 Source advisory: OSV:GHSA-5VCC-86WM-547Q...

arccanet (>=0.0.1, <=0.0.7), dj-jwt (>=0.0.1, <=0.0.2) +5 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.7.2)

djangorestframework-simplejwt PYPI version 4.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - arccanet =0.0.1, =0.0.1, =0.0.7, =2.0.0, =8.0.0 Source cves: CVE-2024-22513 Source advisory:...

alcali (>=2018.3.3, <=3003.1.0), django-rework (>=0.2.2, <=0.4.6) +1 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.4.0)

djangorestframework-simplejwt PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - alcali =2018.3.3, =0.2.2, =0.0.9, =0.0.13 Source cves: CVE-2024-22513 Source advisory:...

auth-satvadev (>=1.0.0, <=1.0.4), django-learngual (>=0.82.0, <=0.895.0) +10 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.8.0)

djangorestframework-simplejwt PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - auth-satvadev =1.0.0, =0.82.0, =0.2.2, =0.0.1, =1.3.0, =2.0.0b1, =0.1.0, =1.0.0, =1.0.7 Source cves:...

alcali (3006.3.0), auth-lib-services (>=0.0.6, <=0.0.7) +45 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (>=5.0.0, <=5.5.0)

djangorestframework-simplejwt PYPI version =5.0.0, =0.0.6, =0.0.8, =0.0.3, =1.0.0, =0.1.7, =0.4.0, =1.0.1, =1.0.0, =1.0.0, =0.2.1, =1.0.0, =0.1.0, =1.0.1, =0.0.86, =0.0.104 and more Source cves: CVE-2024-22513 Source advisory: GHSA-5VCC-86WM-547Q...

django-restframework-2fa (>=0.0.15, <=0.0.16), los-docusign (0.2.2) +2 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.6.0)

djangorestframework-simplejwt PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - django-restframework-2fa =0.0.15, =0.0.16 - los-docusign 0.2.2 - tea-django 0.0.14 - traktor 0.0.10...

xdj-datamap (>=0.0.1, <=0.0.5), xdj-oauth (>=0.0.1, <=0.0.3) +2 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.7.1)

djangorestframework-simplejwt PYPI version 4.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - xdj-datamap =0.0.1, =0.0.1, =0.0.3, =0.0.1, =0.0.6 Source cves: CVE-2024-22513 Source advisory:...

alcali (>=2018.3.1, <=2019.2.2), human-lambdas (>=1.0.43, <=1.0.51) +2 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.3.0)

djangorestframework-simplejwt PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - alcali =2018.3.1, =1.0.43, =0.3.1, =0.3.3 - uboxadmin 0.1.0 Source cves: CVE-2024-22513 Source advisor...

CVE-2024-22513

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

UBUNTU-CVE-2024-22513

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

CVE-2024-22513

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

CVE-2024-22513

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

alcali (>=2018.3.1, <=3006.3.0), arccanet (>=0.0.1, <=0.0.7) +70 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (>=4.3.0, <=5.5.0)

djangorestframework-simplejwt PYPI version =4.3.0, =2018.3.1, =0.0.1, =0.0.6, =0.0.8, =1.0.0, =0.0.3, =1.0.0, =0.1.7, =0.4.0, =0.0.1, =1.0.1, =1.0.0, =1.0.0, =0.2.1, =1.0.0, =1.3.8 and more Source cves: CVE-2024-22513 Source advisory: MEND:CVE-2024-22513...