CVE-2026-114138

A flaw was found in djangorestframework. An unauthenticated remote attacker can cause a Denial of Service DoS by sending HTTP requests with a specially crafted Accept header containing an excessive number of media types with complex parameters. Because the framework performs unbounded and...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 2u-enterprise-data (>=10.22.1, <=10.22.3) +1441 more potentially affected by unknown CVE via djangorestframework (>=3.1.1, <=3.18.1)

djangorestframework PYPI version =3.1.1, =0.0.0, =10.22.1, =0.12.0, =0.1.0, =0.5.1, =0.1.0b7, =1.1.12, =0.1.0, =0.1.0, =0.2.1, =1.0.0, =3.0.0 and more Source cves: unknown CVE Source advisory: MEND:WS-2026-0108...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 2u-enterprise-data (>=10.22.1, <=10.22.3) +1404 more potentially affected by unknown CVE via djangorestframework (>=3.6.4, <=3.18.1)

djangorestframework PYPI version =3.6.4, =0.0.0, =10.22.1, =0.12.0, =0.1.0, =0.5.1, =0.1.0b7, =1.1.12, =0.1.0, =0.1.0, =0.2.1, =1.0.0, =3.0.0 and more Source cves: unknown CVE Source advisory: MEND:WS-2026-0111...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 2u-enterprise-data (>=10.22.1, <=10.22.3) +1244 more potentially affected by unknown CVE via djangorestframework (>=3.12.0, <=3.18.1)

djangorestframework PYPI version =3.12.0, =0.0.0, =10.22.1, =0.12.0, =0.1.0, =0.5.1, =0.1.0b7, =1.1.12, =0.1.0, =0.1.0, =0.2.1, =1.0.0, =0.61.9b59, =2.11.3 and more Source cves: unknown CVE Source advisory: MEND:WS-2026-0107...

airavata-custos-portal (>=0.0.1, <=0.0.6), airavata-custos-portal-sdk (0.0.1) +1 more potentially affected by CVE-2026-102267 via pyjwt (0.4.3)

pyjwt PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - airavata-custos-portal =0.0.1, =1.2.0, =1.3.2 Source cves: CVE-2026-102267 Source advisory: OSV:PYSEC-2026-4144...

airavata-custos-portal (>=0.0.1, <=0.0.6), airavata-custos-portal-sdk (0.0.1) +1 more potentially affected by CVE-2026-102268 via pyjwt (0.4.3)

pyjwt PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - airavata-custos-portal =0.0.1, =1.2.0, =1.3.2 Source cves: CVE-2026-102268 Source advisory: OSV:PYSEC-2026-4145...

airavata-custos-portal (>=0.0.1, <=0.0.6), airavata-custos-portal-sdk (0.0.1) +1 more potentially affected by CVE-2026-101917 via pyjwt (0.4.3)

pyjwt PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - airavata-custos-portal =0.0.1, =1.2.0, =1.3.2 Source cves: CVE-2026-101917 Source advisory: OSV:PYSEC-2026-4140...

djangorestframework-jwt (>=1.0.2, <=1.1.1) potentially affected by CVE-2026-101917 via pyjwt (0.3.2)

pyjwt PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - djangorestframework-jwt =1.0.2, =1.1.1 Source cves: CVE-2026-101917 Source advisory: OSV:PYSEC-2026-4140...

djangorestframework-jwt (>=1.0.2, <=1.1.1) potentially affected by CVE-2026-102267 via pyjwt (0.3.2)

pyjwt PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - djangorestframework-jwt =1.0.2, =1.1.1 Source cves: CVE-2026-102267 Source advisory: OSV:PYSEC-2026-4144...

djangorestframework-jwt (>=1.0.2, <=1.1.1) potentially affected by CVE-2026-102270 via pyjwt (0.3.2)

pyjwt PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - djangorestframework-jwt =1.0.2, =1.1.1 Source cves: CVE-2026-102270 Source advisory: OSV:PYSEC-2026-4148...

djangorestframework-jwt (>=1.0.2, <=1.1.1) potentially affected by CVE-2026-102269 via pyjwt (0.3.2)

pyjwt PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - djangorestframework-jwt =1.0.2, =1.1.1 Source cves: CVE-2026-102269 Source advisory: OSV:PYSEC-2026-4147...

djangorestframework-jwt (>=1.0.2, <=1.1.1) potentially affected by CVE-2026-102268 via pyjwt (0.3.2)

pyjwt PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - djangorestframework-jwt =1.0.2, =1.1.1 Source cves: CVE-2026-102268 Source advisory: OSV:PYSEC-2026-4145...

airavata-custos-portal (>=0.0.1, <=0.0.6), airavata-custos-portal-sdk (0.0.1) +1 more potentially affected by CVE-2026-102270 via pyjwt (0.4.3)

pyjwt PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - airavata-custos-portal =0.0.1, =1.2.0, =1.3.2 Source cves: CVE-2026-102270 Source advisory: OSV:PYSEC-2026-4148...

airavata-custos-portal (>=0.0.1, <=0.0.6), airavata-custos-portal-sdk (0.0.1) +1 more potentially affected by CVE-2026-102270 via pyjwt (0.4.3)

pyjwt PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - airavata-custos-portal =0.0.1, =1.2.0, =1.3.2 Source cves: CVE-2026-102270 Source advisory: OSV:GHSA-JWRC-G2Q2-PQ5P...

djangorestframework-jwt (>=1.0.2, <=1.1.1) potentially affected by CVE-2026-102270 via pyjwt (0.3.2)

pyjwt PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - djangorestframework-jwt =1.0.2, =1.1.1 Source cves: CVE-2026-102270 Source advisory: OSV:GHSA-JWRC-G2Q2-PQ5P...

djangorestframework-jwt (>=1.0.2, <=1.1.1) potentially affected by CVE-2026-102269 via pyjwt (0.3.2)

pyjwt PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - djangorestframework-jwt =1.0.2, =1.1.1 Source cves: CVE-2026-102269 Source advisory: OSV:GHSA-HXM8-2XGR-2P9M...

airavata-custos-portal (>=0.0.1, <=0.0.6), airavata-custos-portal-sdk (0.0.1) +1 more potentially affected by CVE-2026-102269 via pyjwt (0.4.3)

pyjwt PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - airavata-custos-portal =0.0.1, =1.2.0, =1.3.2 Source cves: CVE-2026-102269 Source advisory: OSV:GHSA-HXM8-2XGR-2P9M...

airavata-custos-portal (>=0.0.1, <=0.0.6), airavata-custos-portal-sdk (0.0.1) +1 more potentially affected by CVE-2026-102268 via pyjwt (0.4.3)

pyjwt PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - airavata-custos-portal =0.0.1, =1.2.0, =1.3.2 Source cves: CVE-2026-102268 Source advisory: OSV:GHSA-FFC3-869F-JXW9...

djangorestframework-jwt (>=1.0.2, <=1.1.1) potentially affected by CVE-2026-102268 via pyjwt (0.3.2)

pyjwt PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - djangorestframework-jwt =1.0.2, =1.1.1 Source cves: CVE-2026-102268 Source advisory: OSV:GHSA-FFC3-869F-JXW9...

airavata-custos-portal (>=0.0.1, <=0.0.6), airavata-custos-portal-sdk (0.0.1) +1 more potentially affected by CVE-2026-102267 via pyjwt (0.4.3)

pyjwt PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - airavata-custos-portal =0.0.1, =1.2.0, =1.3.2 Source cves: CVE-2026-102267 Source advisory: OSV:GHSA-9V7F-9G4P-FFGJ...