Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/djangorestframework@3.12.3
purl pkg:pypi/djangorestframework@3.12.3
Next non-vulnerable version 3.15.2
Latest non-vulnerable version 3.15.2
Risk 2.8
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-exen-v4sg-mudc
Aliases:
CVE-2024-21520
GHSA-gw84-84pc-xp82
Cross-site Scripting in djangorestframework Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.
3.15.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T23:03:08.578523+00:00 GitLab Importer Affected by VCID-exen-v4sg-mudc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/djangorestframework/CVE-2024-21520.yml 38.4.0
2026-04-12T00:20:59.244389+00:00 GitLab Importer Affected by VCID-exen-v4sg-mudc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/djangorestframework/CVE-2024-21520.yml 38.3.0
2026-04-03T00:28:31.874065+00:00 GitLab Importer Affected by VCID-exen-v4sg-mudc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/djangorestframework/CVE-2024-21520.yml 38.1.0