Django REST framework 3.11.2
has just been released.
This release resolves a potential XSS security issue affecting the browsable API.
The issue affects REST framework versions prior to 3.11.2.
It does not affect the version 3.12 series.
The issue is officially registered under CVE-2020-25626, which is due to be made public later today.
- T.