Just ask

[mahdirahimi1999]

I remove it

[browniebroke]

Please follow responsible disclosure and don't report security issues publicly like this. We have a paragraph outlining our process: https://www.django-rest-framework.org/#security and it's also visible in GitHub: https://github.com/encode/django-rest-framework/security

[mahdirahimi1999]

I’ve updated the issue and sent the details to the security email.

[mahdirahimi1999]

Hi @browniebroke,
I just wanted to mention that I sent the email about 4 days ago to the security address, but I haven’t received any reply yet.