[ Vendor · 3 CVEs ]
encode
CVEs affecting encode published in the last 30 days, plus any encode CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114137 | 21 Oct 2026 | CVSS 7.4 | Django REST framework: TokenProxy.delete() reports success and revokes nothingDjango REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framework/authtoken/models.py uses… | Fix |
| CVE-2026-114138 | 21 Oct 2026 | CVSS 7.5 | Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiationDjango REST framework is a toolkit for building Web APIs. Prior to 3.18.2, DefaultContentNegotiation.get_accept_list in rest_framework/negotiation.py… | Fix |
| CVE-2026-114136 | 21 Oct 2026 | CVSS 7.5 | Django REST framework: JSONParser applies an attacker-named codec to the request streamDjango REST framework is a toolkit for building Web APIs. From 3.6.4 until 3.18.2, JSONParser.parse in rest_framework/parsers.py uses the… | Fix |