Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:django_rest_framework:django_rest_framework:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Django REST framework: Token revocation failure (CVE-2026-114137)

Django REST framework versions 3.12.0 through 3.18.1 contain a logic flaw where TokenProxy.delete() uses an incorrect primary key, causing credential revocation attempts to fail silently.

Django REST framework vulnerability web-api django
1c