PT-2026-61042 · Pypi · Django Tastypie

Galaxyn · CVE-2026-16208 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions django-tastypie versions prior to 0.15.2

Description A race condition exists in the CacheThrottle() and CacheDBThrottle() functions within the tastypie/throttle.py file. This issue allows a remote attacker to initiate a manipulation that triggers the race condition, although the attack complexity is high and exploitability is considered difficult.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the CacheThrottle() and CacheDBThrottle() functions to minimize the risk of exploitation.

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2026-16208

Affected Products

Django Tastypie

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-16208 · Security Note
• https://github.com/django-tastypie/django-tastypie/issues/1700 · Note
• https://vuldb.com/vuln/380024/cti · Note
• https://vuldb.com/cve/CVE-2026-16208 · Note
• https://twitter.com/VulmonFeeds/status/2078707588196126952 · Twitter Post
• https://vuldb.com/vuln/380024 · Note
• https://github.com/django-tastypie/django-tastypie · Note
• https://vuldb.com/submit/857925 · Note