Product

debian/python-djangorestframework-simplejwt vulnerabilities

1 published CVE affecting debian/python-djangorestframework-simplejwt, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest debian/python-djangorestframework-simplejwt CVEs

Newest publication first

CVE-2024-22513 Improper Privilege Management in djangorestframework-simplejwt
Published 2024-03-16

MediumCVSS 5.5 EPSS 0.80% Public exploit

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

debian/python-djangorestframework-simplejwt vulnerabilities

Latest debian/python-djangorestframework-simplejwt CVEs

CVE-2024-22513 Improper Privilege Management in djangorestframework-simplejwt