32 matches found
auth-satvadev (>=1.0.0, <=1.0.4), django-learngual (>=0.82.0, <=0.895.0) +10 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.8.0)
djangorestframework-simplejwt PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - auth-satvadev =1.0.0, =0.82.0, =0.2.2, =0.0.1, =1.3.0, =2.0.0b1, =0.1.0, =1.0.0, =1.0.7 Source cves:...
arccanet (>=0.0.1, <=0.0.7), dj-jwt (>=0.0.1, <=0.0.2) +5 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.7.2)
djangorestframework-simplejwt PYPI version 4.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - arccanet =0.0.1, =0.0.1, =0.0.7, =2.0.0, =8.0.0 Source cves: CVE-2024-22513 Source advisory:...
xdj-datamap (>=0.0.1, <=0.0.5), xdj-oauth (>=0.0.1, <=0.0.3) +2 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.7.1)
djangorestframework-simplejwt PYPI version 4.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - xdj-datamap =0.0.1, =0.0.1, =0.0.3, =0.0.1, =0.0.6 Source cves: CVE-2024-22513 Source advisory:...
alcali (3006.3.0), auth-lib-services (>=0.0.6, <=0.0.7) +45 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (>=5.0.0, <=5.5.0)
djangorestframework-simplejwt PYPI version =5.0.0, =0.0.6, =0.0.8, =0.0.3, =1.0.0, =0.1.7, =0.4.0, =1.0.1, =1.0.0, =1.0.0, =0.2.1, =1.0.0, =0.1.0, =1.0.1, =0.0.86, =0.0.104 and more Source cves: CVE-2024-22513 Source advisory: OSV:PYSEC-2026-1305...
alcali (>=2018.3.3, <=3003.1.0), django-rework (>=0.2.2, <=0.4.6) +1 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.4.0)
djangorestframework-simplejwt PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - alcali =2018.3.3, =0.2.2, =0.0.9, =0.0.13 Source cves: CVE-2024-22513 Source advisory:...
django-restframework-2fa (>=0.0.15, <=0.0.16), los-docusign (0.2.2) +2 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.6.0)
djangorestframework-simplejwt PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - django-restframework-2fa =0.0.15, =0.0.16 - los-docusign 0.2.2 - tea-django 0.0.14 - traktor 0.0.10...
alcali (>=2018.3.1, <=2019.2.2), human-lambdas (>=1.0.43, <=1.0.51) +2 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.3.0)
djangorestframework-simplejwt PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - alcali =2018.3.1, =1.0.43, =0.3.1, =0.3.3 - uboxadmin 0.1.0 Source cves: CVE-2024-22513 Source advisor...
PYSEC-2026-1305 Improper Privilege Management in djangorestframework-simplejwt
djangorestframework-simplejwt before version 5.5.1 is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...
Security update for python-djangorestframework-simplejwt (moderate)
openSUSE Security Update: Security update for python-djangorestframework-simplejwt Announcement ID: openSUSE-SU-2025:0425-1 Rating: moderate References: 1221568 Cross-References: CVE-2024-22513 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now availabl...
PT-2025-46076
These are all security issues fixed in the python311-djangorestframework-simplejwt-5.5.1-1.1 package on the GA media of openSUSE Tumbleweed...
Django REST Framework SimpleJWT 5.3.1 Information Disclosure
Exploit Title: djangorestframework-simplejwt 5.3.1 - Information Disclosure Date: 26/01/2024 Exploit Author: Dhrumil Mistry dmdhrumilmistry Vendor Homepage: https://github.com/jazzband/djangorestframework-simplejwt/ Software...
CVE-2024-22513
A flaw was found in djangorestframework-simplejwt. Affected versions of this package are vulnerable to information disclosure. This flaw allows a user to access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...
Improper Privilege Management in djangorestframework-simplejwt
djangorestframework-simplejwt before version 5.5.1 is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...
alcali (>=2018.3.1, <=2019.2.2), human-lambdas (>=1.0.43, <=1.0.51) +2 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.3.0)
djangorestframework-simplejwt PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - alcali =2018.3.1, =1.0.43, =0.3.1, =0.3.3 - uboxadmin 0.1.0 Source cves: CVE-2024-22513 Source advisor...
alcali (>=2018.3.3, <=3003.1.0), django-rework (>=0.2.2, <=0.4.6) +1 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.4.0)
djangorestframework-simplejwt PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - alcali =2018.3.3, =0.2.2, =0.0.9, =0.0.13 Source cves: CVE-2024-22513 Source advisory:...
django-restframework-2fa (>=0.0.15, <=0.0.16), los-docusign (0.2.2) +2 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.6.0)
djangorestframework-simplejwt PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - django-restframework-2fa =0.0.15, =0.0.16 - los-docusign 0.2.2 - tea-django 0.0.14 - traktor 0.0.10...
xdj-datamap (>=0.0.1, <=0.0.5), xdj-oauth (>=0.0.1, <=0.0.3) +2 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.7.1)
djangorestframework-simplejwt PYPI version 4.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - xdj-datamap =0.0.1, =0.0.1, =0.0.3, =0.0.1, =0.0.6 Source cves: CVE-2024-22513 Source advisory:...
auth-satvadev (>=1.0.0, <=1.0.4), django-learngual (>=0.82.0, <=0.895.0) +10 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.8.0)
djangorestframework-simplejwt PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - auth-satvadev =1.0.0, =0.82.0, =0.2.2, =0.0.1, =1.3.0, =2.0.0b1, =0.1.0, =1.0.0, =1.0.7 Source cves:...
alcali (3006.3.0), auth-lib-services (>=0.0.6, <=0.0.7) +45 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (>=5.0.0, <=5.5.0)
djangorestframework-simplejwt PYPI version =5.0.0, =0.0.6, =0.0.8, =0.0.3, =1.0.0, =0.1.7, =0.4.0, =1.0.1, =1.0.0, =1.0.0, =0.2.1, =1.0.0, =0.1.0, =1.0.1, =0.0.86, =0.0.104 and more Source cves: CVE-2024-22513 Source advisory: OSV:GHSA-5VCC-86WM-547Q...
arccanet (>=0.0.1, <=0.0.7), dj-jwt (>=0.0.1, <=0.0.2) +5 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.7.2)
djangorestframework-simplejwt PYPI version 4.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - arccanet =0.0.1, =0.0.1, =0.0.7, =2.0.0, =8.0.0 Source cves: CVE-2024-22513 Source advisory:...