Skip to content
Threat Feed
Subscribe

Product

Django REST Framework (3.12.0 - 3.18.1)

1 brief RSS
high advisory

Django REST framework: Token revocation failure (CVE-2026-114137)

Django REST framework versions 3.12.0 through 3.18.1 contain a logic flaw where TokenProxy.delete() uses an incorrect primary key, causing credential revocation attempts to fail silently.

Django REST framework vulnerability web-api django
1c