Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-ttr2-9yma-h7eu
SummaryFastFeedParser is a high performance RSS, Atom and RDF parser. Prior to 0.5.10, when parse() fetches a URL that returns an HTML page containing a <meta http-equiv="refresh"> tag, it recursively calls itself with the redirect URL — with no depth limit, no visited-URL deduplication, and no redirect count cap. An attacker-controlled server that returns an infinite chain of HTML meta-refresh responses causes unbounded recursion, exhausting the Python call stack and crashing the process. This vulnerability can also be chained with the companion SSRF issue to reach internal network targets after bypassing the initial URL check. This vulnerability is fixed in 0.5.10.
Aliases
0
alias CVE-2026-39376
1
alias GHSA-4gx2-pc4f-wq37
2
alias PYSEC-2026-60
Fixed_packages
0
url pkg:pypi/fastfeedparser@0.5.10
purl pkg:pypi/fastfeedparser@0.5.10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.5.10
Affected_packages
0
url pkg:pypi/fastfeedparser@0.1.0
purl pkg:pypi/fastfeedparser@0.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.1.0
1
url pkg:pypi/fastfeedparser@0.2.0
purl pkg:pypi/fastfeedparser@0.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.2.0
2
url pkg:pypi/fastfeedparser@0.2.1
purl pkg:pypi/fastfeedparser@0.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.2.1
3
url pkg:pypi/fastfeedparser@0.2.2
purl pkg:pypi/fastfeedparser@0.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.2.2
4
url pkg:pypi/fastfeedparser@0.3.0
purl pkg:pypi/fastfeedparser@0.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.3.0
5
url pkg:pypi/fastfeedparser@0.3.1
purl pkg:pypi/fastfeedparser@0.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.3.1
6
url pkg:pypi/fastfeedparser@0.3.2
purl pkg:pypi/fastfeedparser@0.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.3.2
7
url pkg:pypi/fastfeedparser@0.3.3
purl pkg:pypi/fastfeedparser@0.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.3.3
8
url pkg:pypi/fastfeedparser@0.3.4
purl pkg:pypi/fastfeedparser@0.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.3.4
9
url pkg:pypi/fastfeedparser@0.3.5
purl pkg:pypi/fastfeedparser@0.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.3.5
10
url pkg:pypi/fastfeedparser@0.3.7
purl pkg:pypi/fastfeedparser@0.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.3.7
11
url pkg:pypi/fastfeedparser@0.3.8
purl pkg:pypi/fastfeedparser@0.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.3.8
12
url pkg:pypi/fastfeedparser@0.3.9
purl pkg:pypi/fastfeedparser@0.3.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.3.9
13
url pkg:pypi/fastfeedparser@0.4.0
purl pkg:pypi/fastfeedparser@0.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.4.0
14
url pkg:pypi/fastfeedparser@0.4.1
purl pkg:pypi/fastfeedparser@0.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.4.1
15
url pkg:pypi/fastfeedparser@0.4.2
purl pkg:pypi/fastfeedparser@0.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.4.2
16
url pkg:pypi/fastfeedparser@0.4.3
purl pkg:pypi/fastfeedparser@0.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.4.3
17
url pkg:pypi/fastfeedparser@0.4.4
purl pkg:pypi/fastfeedparser@0.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.4.4
18
url pkg:pypi/fastfeedparser@0.4.5
purl pkg:pypi/fastfeedparser@0.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.4.5
19
url pkg:pypi/fastfeedparser@0.4.6
purl pkg:pypi/fastfeedparser@0.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.4.6
20
url pkg:pypi/fastfeedparser@0.4.7
purl pkg:pypi/fastfeedparser@0.4.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.4.7
21
url pkg:pypi/fastfeedparser@0.4.8
purl pkg:pypi/fastfeedparser@0.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.4.8
22
url pkg:pypi/fastfeedparser@0.4.9
purl pkg:pypi/fastfeedparser@0.4.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.4.9
23
url pkg:pypi/fastfeedparser@0.5.0
purl pkg:pypi/fastfeedparser@0.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.5.0
24
url pkg:pypi/fastfeedparser@0.5.1
purl pkg:pypi/fastfeedparser@0.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.5.1
25
url pkg:pypi/fastfeedparser@0.5.2
purl pkg:pypi/fastfeedparser@0.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.5.2
26
url pkg:pypi/fastfeedparser@0.5.3
purl pkg:pypi/fastfeedparser@0.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.5.3
27
url pkg:pypi/fastfeedparser@0.5.4
purl pkg:pypi/fastfeedparser@0.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.5.4
28
url pkg:pypi/fastfeedparser@0.5.5
purl pkg:pypi/fastfeedparser@0.5.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.5.5
29
url pkg:pypi/fastfeedparser@0.5.6
purl pkg:pypi/fastfeedparser@0.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.5.6
30
url pkg:pypi/fastfeedparser@0.5.7
purl pkg:pypi/fastfeedparser@0.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.5.7
31
url pkg:pypi/fastfeedparser@0.5.8
purl pkg:pypi/fastfeedparser@0.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.5.8
32
url pkg:pypi/fastfeedparser@0.5.9
purl pkg:pypi/fastfeedparser@0.5.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ttr2-9yma-h7eu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/fastfeedparser@0.5.9
References
0
reference_url https://github.com/kagisearch/fastfeedparser/security/advisories/GHSA-4gx2-pc4f-wq37
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://github.com/kagisearch/fastfeedparser/security/advisories/GHSA-4gx2-pc4f-wq37
Weaknesses
Exploits
Severity_range_score7.5 - 7.5
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-ttr2-9yma-h7eu