CVE-2026-16207CWE-598

django-tastypie authentication.py ApiKeyAuthentication get request method with sensitive query strings

Medium · published July 19, 2026

CVSS v4.0
6.3
EPSS
1%
Percentile
49.2
In the wild
Unconfirmed
What it is

A vulnerability was detected in django-tastypie up to 0.15.1. Impacted is the function ApiKeyAuthentication of the file tastypie/authentication.py. The manipulation results in use of get request method with sensitive query strings. The attack can be launched remotely. This attack is characterized by high complexity. The exploitability is considered difficult. The project was informed of the problem early through an issue report but has not responded yet.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X
EPSS
0.00622 · 49.2th percentile
Weakness
CWE-598 · Use of HTTP Request With Sensitive Query String
Published
2026-07-19T02:30Z
EPSS history
Timeline
  • 19 JUL 02:30Z
    django-tastypie authentication.py ApiKeyAuthentication get request method with sensitive query strings
    cvelistv5