CVE-2018-25045
Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping.
- Update to 3.9.1
Published Updated
PatchFirst · Latest vulnerabilities
django-rest-framework vulnerabilities
Vulnerabilities published for django-rest-framework in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 1
Check your server
Check your installed stack and versions against the current vulnerability feeds.