Django security posture
Review linked rules in the directory and use Composer to export guardrails for your IDE. Detailed posture metrics will appear here as the catalog grows.
2 linked rules in the directory.
Top risks for this stack
00 critical04 high
Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`MEDIUM
Sep 2026
No rule coverage yet — consider contributing a rule.
Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requestsMEDIUM
Sep 2026
No rule coverage yet — consider contributing a rule.
Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatchHIGH
Jul 2026
No rule coverage yet — consider contributing a rule.
Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of serviceHIGH
Jul 2026
No rule coverage yet — consider contributing a rule.
Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of serviceMEDIUM
Jul 2026
No rule coverage yet — consider contributing a rule.
Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()HIGH
Jul 2026
No rule coverage yet — consider contributing a rule.
Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflowHIGH
Jul 2026
No rule coverage yet — consider contributing a rule.
Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated imagesMEDIUM
Jul 2026
No rule coverage yet — consider contributing a rule.