Skip to content
Threat Feed
Subscribe

Vendor

Django REST Framework

1 brief RSS
high advisory

Django REST framework: Token revocation failure (CVE-2026-114137)

Django REST framework versions 3.12.0 through 3.18.1 contain a logic flaw where TokenProxy.delete() uses an incorrect primary key, causing credential revocation attempts to fail silently.

Django REST framework vulnerability web-api django
1c