GHSA-57H7-R3Q3-W57J Cross-Site Scripting

Django-Rest-Framework, before 3.9.1, has a XSS vulnerability caused by disabled autoescaping in the default DRF Browsable API view templates...

PT-2021-24383

Name of the Vulnerable Software and Affected Versions: Django-Rest-Framework versions prior to 3.9.1 Description: The issue is caused by disabled autoescaping in the default DRF Browsable API view templates, leading to a XSS vulnerability. Recommendations: For versions prior to 3.9.1, update to...