Lucene search
+L

53 matches found

PyPA
PyPA
•added 2026/09/10 9:44 a.m.•17 views

Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`

SummaryWhile investigating Django REST Framework's request parsing behavior, I identified that DRF's high-level request.data parsing appears to bypass Django's configured DATAUPLOADMAXMEMORYSIZE protection for application/json and application/x-www-form-urlencoded request bodies.In the tested...

5.3CVSS6AI score0.00557EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder