[Git][security-tracker-team/security-tracker][master] new djangorestframework issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
906a80e5 by Moritz Muehlenhoff at 2026-10-22T21:01:53+02:00
new djangorestframework issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -766,11 +766,17 @@ CVE-2026-114140 (The nbconvert tool, jupyter nbconvert, converts Jupyter noteboo
 CVE-2026-114139 (Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36 ...)
 	TODO: check
 CVE-2026-114138 (Django REST framework is a toolkit for building Web APIs. Prior to 3.1 ...)
-	TODO: check
+	- djangorestframework 3.18.3+ds1-1
+	NOTE: https://github.com/encode/django-rest-framework/security/advisories/GHSA-33wh-fxxf-88vv
+	NOTE: https://github.com/encode/django-rest-framework/commit/148ab6523922d5a0c110f76615935e5220b63029 (3.18.2)
 CVE-2026-114137 (Django REST framework is a toolkit for building Web APIs. From 3.12.0  ...)
-	TODO: check
+	- djangorestframework 3.18.3+ds1-1
+	NOTE: https://github.com/encode/django-rest-framework/security/advisories/GHSA-xw6w-gcfp-cf8m
+	NOTE: https://github.com/encode/django-rest-framework/commit/af3fabfd517307fbc5d500fba1ab8f6e25f220b0 (3.18.2)
 CVE-2026-114136 (Django REST framework is a toolkit for building Web APIs. From 3.6.4 u ...)
-	TODO: check
+	- djangorestframework 3.18.3+ds1-1
+	NOTE: https://github.com/encode/django-rest-framework/security/advisories/GHSA-3547-9m27-7rxg
+	NOTE: https://github.com/encode/django-rest-framework/commit/3c2634599b26a9f789b03045118dbc276117611a (3.18.2)
 CVE-2026-114135 (Jupyter Server is the backend for Jupyter web applications. From 2.0.0 ...)
 	TODO: check
 CVE-2026-114133 (Nuxt is an open-source web development framework for Vue.js. From 3.13 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/906a80e512a970989da0f569e3206c0cb24105d7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/906a80e512a970989da0f569e3206c0cb24105d7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/0dca6c1a/attachment.htm>