CVE-2019-13177: Django-Rest-Registration Project Django-Rest-Registration

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static string for signatures (i.e., the Django Signing API is misused), which allows remote attackers to spoof the verification process. This occurs because incorrect code refactoring led to calling a security-critical function with an incorrect argument.

Affected products

• Django-Rest-Registration Project Django-Rest-Registration: after 0.1.0, before 0.5.0 (fixed in 0.5.0)

Published 2019-07-02. Last modified 2026-06-17.