Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/djangorestframework@3.14.0-2%2Bdeb12u1
purl pkg:deb/debian/djangorestframework@3.14.0-2%2Bdeb12u1
Next non-vulnerable version 3.16.0-1
Latest non-vulnerable version 3.16.0-1
Risk 2.8
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-exen-v4sg-mudc
Aliases:
CVE-2024-21520
GHSA-gw84-84pc-xp82
Cross-site Scripting in djangorestframework Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.
3.16.0-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:26:35.207692+00:00 Debian Importer Affected by VCID-exen-v4sg-mudc https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:02:40.716455+00:00 Debian Importer Affected by VCID-exen-v4sg-mudc https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:08:11.313129+00:00 Debian Importer Affected by VCID-exen-v4sg-mudc https://security-tracker.debian.org/tracker/data/json 38.1.0