GCVE - cpe:2.3:a:django-rest-registration_project:django-rest-registration:*:*:*:*:*:django:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:django-rest-registration_project:django-rest-registration:*:*:*:*:*:django:*:*

part: a version: * update: *

Vendor	Django Rest Registration Project (`8a6ffe9f-978d-5cea-8048-560db9b68a33`)
Product	Django Rest Registration (`b0b6310b-f018-5ebc-a4dd-ea269d80df5d`)
Edition	*
Language	*
Software edition	*
Target software	django
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-13177`	vulnerable	2026-06-08 05:12:41.377374	Details available verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static string for signatures (i.e., the Django Signing API is misused), which allows remote attackers to spoof the verification process. This occurs because incorrect code refactoring led to calling a security-critical function with an incorrect argument. Published: 2019-07-02T21:17:53.000Z Updated: 2024-08-04T23:41:10.490Z Open on db.gcve.eu Reference links https://github.com/apragacz/django-rest-registration/security/advisories/GHSA-p3w6-jcg4-52xh https://github.com/apragacz/django-rest-registration/releases/tag/0.5.0	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.