CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/py-djangorestframework 3.18.1,1

Django REST framework

Port info

Maintainer
kai@FreeBSD.org
Packages
latest: 3.18.1,1
Upstream
Higher version available: 3.18.3
Last update
to 3.18.1,1 · 01acca7143
Quarterly
2026Q4: 3.18.1,1
WWW
https://www.django-rest-framework.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install py312-djangorestframework
installs 3.18.1,1 from latest; from quarterly (2026Q4) 3.18.1,1
Port
# cd /usr/ports/www/py-djangorestframework && make install clean
Size
858 KiB download · 3.8 MiB installed
Depends on
lang/python312 3.12.15, www/py-django52 5.2.18
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.18.1,13.18.1,1–
FreeBSD 153.18.1,13.18.1,1–
FreeBSD 143.18.1,13.18.1,13.18.1,1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.18.1,13.18.1,1–
FreeBSD 143.18.1,13.18.1,13.18.1,1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.18.1,1.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (41)

Kai Knoblich (kai) · 3.18.1,1
www/py-djangorestframework: Update to 3.18.1

Changelog:

https://github.com/encode/django-rest-framework/releases/tag/3.18.1
01acca7143
Kai Knoblich (kai) · 3.18.0,1
www/py-djangorestframework: Update to 3.18.0

Changelog:

https://github.com/encode/django-rest-framework/releases/tag/3.18.0
923cb7035d
Kai Knoblich (kai) · 3.17.2,1 MFH 2026Q3 ✓
www/py-djangorestframework: Update to 3.17.2

Changelog:

https://github.com/encode/django-rest-framework/releases/tag/3.17.2

MFH:		2026Q3
Security:	5ce58e67-919a-11f1-b333-901b0edee044
50a7f8d61d
Kai Knoblich (kai) · 3.17.1,1
www/py-djangorestframework: Update to 3.17.1

Changelogs since 3.16.1:

https://github.com/encode/django-rest-framework/releases/tag/3.17.1
https://github.com/encode/django-rest-framework/releases/tag/3.17.0
0404f6b2a2
Kai Knoblich (kai) · 3.16.1_1,1
*: Switch consumers over to Django 5.2

Django 4.2 reached its End-of-Life on 7th April 2026 and Django 5.2 is
the new LTS (= Long Term Support) release which will be supported until
April 2028.

* Switch most ports that use www/py-django42 to www/py-django52.

* Where necessary, remove PORTSCOUT, which is no longer needed because
  an update to a newer version that no longer supports Django 4.2 should
  now be possible.

* Bump PORTREVISION due dependency change where necessary.

PR:		291707
Reviewed by:	sunpoet (python)
Differential Revision:	https://reviews.freebsd.org/D56966
ce59801b72
Kai Knoblich (kai) · 3.16.1,1
www/py-djangorestframework: Update to 3.16.1

Changelog:

https://github.com/encode/django-rest-framework/releases/tag/3.16.1
47630a9785
Kai Knoblich (kai) · 3.16.0,1
www/py-djangorestframework: Update to 3.16.0

* Switch to the PEP517 build framework.

* Also moving to the more preferred DISTVERSION, while I'm here.

Changelog:

https://github.com/encode/django-rest-framework/releases/tag/3.16.0
7657066def
Po-Chuan Hsieh (sunpoet) · 3.15.2_1,1
www/py-djangorestframework: Remove outdated PYTHON_REL check after lang/python38 removal (ca15850a2b13f4fede0294d724e1d4a8edec8407)

Approved by:	portmgr (blanket)
With hat:	python
02a275ad59
Charlie Li (vishwin) · 3.15.2_1,1
python: bump all USE_PYTHON=distutils consumers after RUN_DEPENDS removal

Any missed ports, feel free to bump.

Any ports that need setuptools at runtime can have the devel/py-setuptools
manually added back to RUN_DEPENDS, but understand that this practice
is deprecated; see CHANGES for details.
06a08e69f3
Kai Knoblich (kai) · 3.15.2,1
www/py-djangorestframework: Update to 3.15.2

Changelog since 3.14.0:

https://www.django-rest-framework.org/community/release-notes/#3152
0cffd5a7f4
Kai Knoblich (kai) · 3.14.0_1,1
*: Switch consumers over to Django 4.2

Django 3.2 reached its End-of-Life on 1st April 2024 and Django 4.2 is
the new LTS (= Long Term Support) release which will be supported until
April 2026.

* Switch most ports that use www/py-django32 to www/py-django42.

* Ports that are not compatible with Django 3.2 have already been set
  with an expiration date were not taken into account.

* Bump PORTREVISION due dependency change where necessary.

PR:		276319
Reviewed by:	dvl, grembo, ultima
Approved by:	bofh (implicit), dvl, grembo, Kevin Golding, sunpoet,
		ultima, maintainer timeout (remaining maintainers)
Differential Revision:	https://reviews.freebsd.org/D44637
680c68fd4d
Rene Ladan (rene) · 3.14.0,1
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Dmitry Marakasov (amdmi3) · 3.14.0,1
*/*: rename CHEESESHOP to PYPI in MASTER_SITES

PR:			267994
Differential revision:	D37518
Approved by:		bapt
77d68471ad
Kai Knoblich (kai) · 3.14.0,1
www/py-djangorestframework: Update to 3.14.0

Changelog:

https://www.django-rest-framework.org/community/release-notes/#3140
a7f6cbe48f
Stefan Eßer (se) · 3.13.1,1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.13.1,1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Kai Knoblich (kai) · 3.13.1,1
net-mgmt/netbox: Create Django 4.0 consumers

* Django 3.2 is currently the "default" version in the ports tree due
  its long term support until April 2024.  Thus ports that are assigned
  to that version will exist until then.

  The following ports are required to make the upgrade of
  net-mgmt/netbox to the 3.2 release possible because it requires Django
  4.0.

  All of the ports listed below were created on the basis of their
  respective original ports:

  - devel/py-dj40-django-rq
  - devel/py-dj40-graphene-django
  - www/py-dj40-django-auth-ldap
  - www/py-dj40-django-cors-headers
  - www/py-dj40-django-debug-toolbar
  - www/py-dj40-django-filter
  - www/py-dj40-django-graphiql-debug-toolbar
  - www/py-dj40-django-js-asset
  - www/py-dj40-django-mptt
  - www/py-dj40-django-prometheus
  - www/py-dj40-django-redis
  - www/py-dj40-django-tables2
  - www/py-dj40-django-taggit
  - www/py-dj40-django-timezone-field
  - www/py-dj40-djangorestframework
  - www/py-dj40-drf-yasg

* Simplify the related CONFLICTS_INSTALL entries as well.  This also
  reduces editing of the Makefiles if another ports need to be
  "repo-copied" (e.g. for Django 4.1) based on the original ports in the
  future. [1]

Reviewed by:	se [1], sunpoet
Differential Revision:	https://reviews.freebsd.org/D35444
89acacbfee
Kai Knoblich (kai) · 3.13.1,1
www/py-djangorestframework: Update to 3.13.1

* Remove obsolete entries from CONFLICTS_INSTALL.

* Update pkg-descr to match reality.

Changelog since 3.12.4:

https://www.django-rest-framework.org/community/release-notes/#313x-series
f38fc1bea7
Kai Knoblich (kai) · 3.12.4_1,1
www/py-django32: Switch consumers over to Django 3.2

Django 2.2 became End-of-Life on 11th April 2022 and Django 3.2 is the
new LTS (= Long Term Support) release which will be supported until
April 2024.

* Switch the most ports that use www/py-django22 to www/py-django32

* Switch www/seahub over to www/py-djangorestframework

* Ports that are not yet ready for Django 3.2 (only three so far) or
  those that have already been set with an expiration date were not
  taken into account.

* Bump PORTREVISION due dependency change where necessary.

PR:		261313
Reviewed by:	bofh, dvl, koobs, ultima
Approved by:	bofh, dvl, koobs, ultima, sunpoet, Kevin Golding, Ivan Rozhuk,
		Alexander Sieg (maintainers)
		maintainer timeout (remaining maintainers)
Differential Revision:	https://reviews.freebsd.org/D34859
0cf5531fcd
Kai Knoblich (kai) · 3.12.4,1
*: Create Django 3.2 ports for net-mgmt/netbox

* Django 2.2 is currently the "default" version in the ports tree due
  its long term support until April 2022.  Thus ports that are assigned
  to that version will exist until then.

  The following ports are required to make the upgrade of
  net-mgmt/netbox to the 2.11 release possible because it requires
  Django 3.2.  All of the ports listed below were created on the basis
  of their respective original ports:

  - devel/py-dj32-django-rq
  - www/py-dj32-django-auth-ldap
  - www/py-dj32-django-cacheops (updated to a newer release)
  - www/py-dj32-django-cors-headers
  - www/py-dj32-django-debug-toolbar
  - www/py-dj32-django-filter
  - www/py-dj32-django-js-asset
  - www/py-dj32-django-mptt
  - www/py-dj32-django-prometheus
  - www/py-dj32-django-redis
  - www/py-dj32-django-tables2 (updated to a newer release)
  - www/py-dj32-django-taggit (updated to a newer release)
  - www/py-dj32-django-timezone-field
  - www/py-dj32-djangorestframework
  - www/py-dj32-drf-yasg

* Add/update the related CONFLICTS_INSTALL entries as well.

Reviewed by:	koobs, sunpoet
Differential Revision:	https://reviews.freebsd.org/D30977
fd76d1a577
Mathieu Arnold (mat) · 3.12.4,1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 3.12.4,1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Kai Knoblich (kai) · 3.12.4,1
www/py-djangorestframework: Update to 3.12.4

Changelog since 3.12.2:

https://www.django-rest-framework.org/community/release-notes/#3124
4440dd533e
Kai Knoblich (kai) · 3.12.2,1
www/py-djangorestframework: Update to 3.12.2

* Remove obsolete info from pkg-descr while I'm here.

Changelog:

https://www.django-rest-framework.org/community/release-notes/#3122
bbae5a89a4
Kai Knoblich (kai) · 3.12.1,1
Create some ports that are assigned to Django 3.1 instead Django 2.2

* Django 2.2 is currently the "default" version in the ports tree due its
  long term support until April 2022.  Thus ports that are assigned to that
  version will exist until then.

  The following ports are required to make the upgrade of net-mgmt/netbox to
  the 2.9 release possible because it requires Django 3.1 and provides no
  backwards compatibility for previous versions of Django.

  - www/py-dj31-django-rq
      (copied from r539662 to use the 2.3.2 release for now)
  - www/py-dj31-django-auth-ldap
  - www/py-dj31-django-cacheops
  - www/py-dj31-django-cors-headers
  - www/py-dj31-django-debug-toolbar
  - www/py-dj21-django-filter
  - www/py-dj31-django-js-asset
  - www/py-dj31-django-mptt
  - www/py-dj31-django-prometheus
  - www/py-dj31-django-redis
  - www/py-dj31-django-tables2
  - www/py-dj31-django-taggit
  - www/py-dj31-django-timezone-field
  - www/py-dj31-djangorestframework
  - www/py-dj31-drf-yasg

* Also limit the new ports to Python 3.6+ due the requirements of Django 3.1
  and add/update the related CONFLICTS_INSTALL entries.

Reviewed by:	sunpoet
Differential Revision:	https://reviews.freebsd.org/D27083
a0f4c73ff7
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.12.1,1
Update to 3.12.1

Changes:	https://github.com/encode/django-rest-framework/releases
		https://github.com/encode/django-rest-framework/commits/master
PR:		250122
Submitted by:	sunpoet (myself)
Approved by:	maintainer (timeout, 18 days)
71d9425985
Kai Knoblich (kai) · 3.11.0,1
www/py-djangorestframework: Update to 3.11.0

* Switch the port to Django 2.2 (current LTS release) as well because
  Django 1.11 is End-of-Life since April.  Do the same for www/py-drf-yasg.

* Repo-copy www/py-djangorestframework to www/py-djangorestframework311
  which will be used as a transitional package by www/seahub until it gets
  support for Django 2.2+ in the next weeks/months.

* Drop the Python 2.7 support of the remaining consumers to avoid breakage
  of "bulk -a".

* Mark both repo-copied ports www/py-dj22-{djangorestframework,drf-yasg} as
  deprecated because they're obsolete now.

PR:		245309
Reviewed by:	sunpoet (earlier revision), ultima
Differential Revision:	https://reviews.freebsd.org/D24850
ea1b10f966
Kai Knoblich (kai) · 3.9.4,1
www/py-djangorestframework: Update to 3.9.4

Changelog:

https://www.django-rest-framework.org/community/release-notes/#394
e56a33cd9c
Kai Knoblich (kai) · 3.9.2,1
www/py-djangorestframework: Update to 3.9.2

Changes since 3.9.0:

* Routers: invalidate _urls cache on register()
* Deferred schema renderer creation to avoid requiring pyyaml.
* Added 'request_forms' block to base.html
* Fixed SchemaView to reset renderer on exception.
* Update Django Guardian dependency.
* Ensured support for Django 2.2
* Made templates compatible with session-based CSRF.
* Adjusted field validators to accept non-list iterables.
* Added SearchFilter.get_search_fields() hook.
* Fix DeprecationWarning when accessing collections.abc classes via
  collections.
* Allowed Q objects in limit_choices_to introspection.
* Added lazy evaluation to composed permissions.
* Add negation ~ operator to permissions composition.
* Avoided calling distinct on annotated fields in SearchFilter.
* Introduced RemovedInDRF…Warning classes to simplify deprecations.
* Resolve XSS issue in browsable API.
* Upgrade Bootstrap to 3.4.0 to resolve XSS issue.
* Resolve issues with composable permissions.
* Respect limit_choices_to on foreign keys.

https://www.django-rest-framework.org/community/release-notes/#39x-series

Approved by:	mentors (implicit)
27f581f690
Kai Knoblich (kai) · 3.9.0,1
www/py-{dj21-,}djangorestframework: Update WWW

* Update the WWW field to spare redirects from HTTP to HTTPS

Reported by:	Repology
Approved by:	mentors (implicit)
e3cdd2e82a
Kai Knoblich (kai) · 3.9.0,1
Create some ports that are assigned to Django 2.1 instead Django 1.11.

Django 1.11 is currently the "default" version in the ports tree due its
long term support until April 2020 thus ports that are assigned to that
version will exist until then.

The following packages are required to make the upgrade of net-mgmt/netbox
to 2.5.x possible because upstream has decided to switch from Django 1.11
to Django 2.1:

* www/py-dj21-django-cors-headers
* www/py-dj21-django-debug-toolbar
* www/py-dj21-django-filter
* www/py-dj21-django-js-asset
* www/py-dj21-django-mptt
* www/py-dj21-django-tables2
* www/py-dj21-django-taggit
* www/py-dj21-django-timezone-field
* www/py-dj21-djangorestframework
* www/py-dj21-drf-yasg

Also limit the new ports to Python 3.5 and later to match the requirements
for Django 2.1 and to reduce some overhead in the building infrastructure.

Reviewed by:	miwi, tcberner (mentors)
Approved by:	miwi
Differential Revision:	https://reviews.freebsd.org/D19059
68dbb932f9
Kai Knoblich (kai) · 3.9.0,1
Change my maintainer email address to my new one at the FreeBSD project.

Reviewed by:	miwi (mentor)
Approved by:	miwi (mentor)
Differential Revision: https://reviews.freebsd.org/D19050
6a4a5116bf
Martin Wilke (miwi) · 3.9.0,1
- Update to 3.9.0

Changes by upstream:
- https://www.django-rest-framework.org/community/release-notes/#39x-series

PR:		234639
Submitted by:	maintainer
Sponsored by:	iXsystems Inc.
907c64b2a6
Kurt Jaeger (pi) · 3.8.2,1
New port: www/py-djangorestframework as version 3.8.x

- py-djangorestframework 3.6.x lives on as py-djangorestframework36
- seahub and django-annotations stay on -36

PR:		227319
Submitted by:	Kai <freebsd_ports@k-worx.org>
Reviewed by:	antoine, sunpoet
fb1da81342
Antoine Brodin (antoine) · 3.6.4,1
Revert r457271, version 3.7.7 is not compatible with django 1.8

With hat:	portmgr
f9deff1be5
Antoine Brodin (antoine) · 3.7.7
Simplify some USES=python

With hat:	portmgr
377901b804
Alfred Perlstein (alfred) · 3.7.7
www/py-djangorestframework: update to 3.7.7
cfbad457d7
Alfred Perlstein (alfred) · 3.6.4
update to 3.6.4 for py3 support
671f79ea10
Alfred Perlstein (alfred) · 3.3.3
www/py-djangorestframework: update to 3.3.3
31448d4a66
Alfred Perlstein (alfred) · 3.3.2
- Update to 3.3.2.
f1180f699d
Alfred Perlstein (alfred) · 3.1.1
Add django rest framework and some of its modules.

Differential Revision:      https://reviews.freebsd.org/D3806
32c3c8a566