Django Rest Framework Json Web Tokens

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:styria:django-rest-framework-json_web_tokens:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorStyria (4f5ed8e3-3b1c-5d0d-a484-cec5b0940856)
ProductDjango Rest Framework Json Web Tokens (90559cd8-05ef-5660-bd58-688d9a2b6094)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jpadilla/django-rest-framework-jwt purl2cpe 2026-06-01 10:13:20.398427
pkg:github/styria-digital/django-rest-framework-jwt purl2cpe 2026-06-01 10:13:20.398431
pkg:pypi/drf-jwt purl2cpe 2026-06-01 10:13:20.398433
pkg:rpm/opensuse/python-drf-jwt purl2cpe 2026-06-01 10:13:20.398436

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10594 vulnerable 2026-06-08 05:16:35.335663 Details available
An issue was discovered in drf-jwt 1.15.x before 1.15.1. It allows attackers with access to a notionally invalidated token to obtain a new, working token via the refresh endpoint, because the blacklist protection mechanism is incompatible with the token-refresh feature. NOTE: drf-jwt is a fork of jpadilla/django-rest-framework-jwt, which is unmaintained.
Published: 2020-03-15T21:22:09.000Z
Updated: 2024-08-04T11:06:09.995Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.