[Git][security-tracker-team/security-tracker][master] Two djangorestframework issues fixed via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Sep 27 17:22:38 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
6d115111 by Salvatore Bonaccorso at 2026-09-27T18:22:14+02:00
Two djangorestframework issues fixed via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -60634,7 +60634,7 @@ CVE-2026-73231 (Faker generates massive amounts of fake data in the browser and
CVE-2026-73230 (Ente provides end-to-end encrypted cloud services and security tools. ...)
NOT-FOR-US: Ente
CVE-2026-73229 (Django REST framework is a powerful and flexible toolkit for building ...)
- - djangorestframework <unfixed> (bug #1144350)
+ - djangorestframework 3.18.1+ds1-1 (bug #1144350)
[trixie] - djangorestframework <no-dsa> (Minor issue)
[bookworm] - djangorestframework <postponed> (Minor issue)
NOTE: https://github.com/encode/django-rest-framework/security/advisories/GHSA-g47c-3xmw-q6m2
@@ -61048,7 +61048,7 @@ CVE-2026-19560 (Use after free in Blink in Google Chrome prior to 151.0.7922.137
CVE-2026-9214 (Insufficient input validation vulnerability in the NETGEAR R7000 model ...)
NOT-FOR-US: Netgear
CVE-2026-73228 (Django REST framework is a toolkit for building Web APIs. Prior to 3.1 ...)
- - djangorestframework <unfixed> (bug #1144350)
+ - djangorestframework 3.18.1+ds1-1 (bug #1144350)
[trixie] - djangorestframework <no-dsa> (Minor issue)
[bookworm] - djangorestframework <postponed> (Minor issue)
NOTE: https://github.com/encode/django-rest-framework/security/advisories/GHSA-2m8g-3cmr-wg3w
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d1151114b25589c517de31cea142d62b3a0e3b7
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d1151114b25589c517de31cea142d62b3a0e3b7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260927/54391e20/attachment.htm>
More information about the debian-security-tracker-commits
mailing list