CVE-2026-16207
django-tastypie authentication.py ApiKeyAuthentication get request method with sensitive query strings
CVSS Score
3.7
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was detected in django-tastypie up to 0.15.1. Impacted is the function ApiKeyAuthentication of the file tastypie/authentication.py. The manipulation results in use of get request method with sensitive query strings. The attack can be launched remotely. This attack is characterized by high complexity. The exploitability is considered difficult. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-598 |
| Vendor | n/a |
| Product | django-tastypie |
| Published | Jul 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a django-tastypie
Be the first to know when new low vulnerabilities affecting n/a django-tastypie are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / django-tastypie
0.15.0 0.15.1
References
vuldb.com: https://vuldb.com/vuln/380023 vuldb.com: https://vuldb.com/vuln/380023/cti vuldb.com: https://vuldb.com/cve/CVE-2026-16207 vuldb.com: https://vuldb.com/submit/857924 github.com: https://github.com/django-tastypie/django-tastypie/issues/1700 github.com: https://github.com/django-tastypie/django-tastypie/
Credits
🔍 Galaxyn (VulDB User) VulDB CNA Team