Approved changes feed: RSS · Atom

cpe:2.3:a:django-tastypie:django-tastypie:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDjango Tastypie (41f14243-3f3e-5f0f-9b6f-75aaf3b26de3)
ProductDjango Tastypie (90951c84-040a-5ab7-9325-d66d220d1f2c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-16208 vulnerable 2026-07-29 00:26:18.573913 django-tastypie throttle.py CacheDBThrottle race condition
MEDIUM (5)
A flaw has been found in django-tastypie up to 0.15.1. The affected element is the function CacheThrottle/CacheDBThrottle of the file tastypie/throttle.py. This manipulation causes race condition. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitability is described as difficult. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-07-19T02:45:09.240Z
Updated: 2026-07-22T14:58:26.978Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16207 vulnerable 2026-07-29 00:26:18.573620 django-tastypie authentication.py ApiKeyAuthentication get request method with sensitive query strings
LOW (3.7)
A vulnerability was detected in django-tastypie up to 0.15.1. Impacted is the function ApiKeyAuthentication of the file tastypie/authentication.py. The manipulation results in use of get request method with sensitive query strings. The attack can be launched remotely. This attack is characterized by high complexity. The exploitability is considered difficult. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-07-19T02:30:08.210Z
Updated: 2026-07-20T13:24:00.321Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.