Security update for python-djangorestframework, python-Django (moderate)

openSUSE Security Update: Security update for python-djangorestframework, python-Django Announcement ID: openSUSE-SU-2026:0138-1 Rating: moderate References: 1227077 1259142 1261722 1261731 1261732 PED-8919 Cross-References: CVE-2024-21520 CVE-2026-25674 CVE-2026-33033 CVE-2026-4277 CVE-2026-4292...

Security update for python-djangorestframework (moderate)

openSUSE Security Update: Security update for python-djangorestframework Announcement ID: openSUSE-SU-2026:0038-1 Rating: moderate References: 1227077 PED-8919 Cross-References: CVE-2024-21520 CVSS scores: CVE-2024-21520 SUSE: 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products:...

python311-djangorestframework-3.16.1-2.1 on GA media (moderate)

python311-djangorestframework-3.16.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:10115-1 Rating: moderate Cross-References: CVE-2024-21520 CVSS scores: CVE-2024-21520 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

Linux Distros Unpatched Vulnerability : CVE-2024-21520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting XSS via the breaklongheaders template filter due to improper...

Security Bulletin: IBM Maximo Application Suite: djangorestframework-3.15.1-py3-none-any.whl is vulnerable to CVE-2024-21520 used in IBM Maximo Application Suite - Edge Data Collector

Summary IBM Maximo Application Suite - Edge Data Collector uses djangorestframework-3.15.1-py3-none-any.whl which is vulnerable to CVE-2024-21520 Vulnerability Details CVEID:CVE-2024-21520 DESCRIPTION: Encode Django REST framework is vulnerable to cross-site scripting, caused by improper validati...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2024:7312)

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:7312 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

CVE-2024-21520

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting XSS via the breaklongheaders template filter due to improper input sanitization before splitting and joining with tags...

CVE-2024-21520

CVE-2024-21520 affects Django REST framework before 3.15.2. It enables Cross‑site Scripting via the break_long_headers template filter because input is not properly sanitized before splitting and joining with tags. Connected advisories indicate fixes in OpenSUSE packages (python-djangorestframew...

acdh-django-vocabs (>=0.1.0 <=0.1.6), adede (=4.1.0) +899 more potentially affected by CVE-2024-21520 via djangorestframework (>=3.10.0 <=3.15.1)

djangorestframework PYPI version =3.10.0, =0.1.0, =1.1.12, =0.1.0, =0.61.9, =0.0.1, =0.0.3, =2018.3.1, =2022.6.0.post0, =2.0.0, =1.0.0, =2.0.0, =2.1.0, =2.3.1 and more Source cves: CVE-2024-21520 Source advisory: SNYK:PYTHON-DJANGORESTFRAMEWORK-7252137...