Skip to content
Threat Feed
Subscribe

Product

Django REST Framework (>= 3.6.4)

1 brief RSS
high advisory

Django REST framework: JSONParser memory exhaustion via charset parameter

Django REST framework (DRF) JSONParser fails to validate charset codecs, allowing attackers to bypass DATA_UPLOAD_MAX_MEMORY_SIZE limits through malicious compression, leading to significant memory amplification.

Django REST framework