VYPR

JobJobEventsChildrenSummary

by Red Hat

CVEs (1)

  • CVE-2026-71459MedSep 23, 2026
    risk 0.33cvss 5.0epss

    JobJobEventsChildrenSummary view has no model/parent_model. ModelAccessPermission.check_get_permissions() falls through (returns True) for any authenticated user. The view uses raw get_object_or_404(Job, pk) without DRF object-level …