EUVD-2024-2061

Malicious code in bioql PyPI...

CVE-2024-21520

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting XSS via the breaklongheaders template filter due to improper input sanitization before splitting and joining with tags...

acdh-django-vocabs (>=0.1.0 <=0.1.6), adede (=4.1.0) +897 more potentially affected by CVE-2024-21520 via djangorestframework (>=3.10.0 <=3.15.1)

djangorestframework PYPI version =3.10.0, =0.1.0, =1.1.12, =0.1.0, =0.61.9, =0.0.1, =0.0.3, =2018.3.1, =2022.6.0.post0, =2.0.0, =1.0.0, =2.0.0, =2.1.0, =2.3.1 and more Source cves: CVE-2024-21520 Source advisory: SNYK:PYTHON-DJANGORESTFRAMEWORK-7252137...