A race condition in the CacheThrottle/CacheDBThrottle implementation of django‑tastypie can cause the throttle cache to become corrupted when multiple requests are processed concurrently. This flaw may lead to denial of service if legitimate requests are rejected or if the throttling logic becomes unreliable. The vulnerability originates from improper handling of concurrent cache updates – a Concurrent Execution Error (CWE‑362).

All installations of django‑tastypie up to version 0.15.1 are affected. Projects that use this library to enforce API request limits, such as Django‑based web services, should verify the installed version and check for any updates beyond 0.15.1.

The CVSS base score of 2.3 reflects a low overall risk. The EPSS score of less than 1 % indicates a very low likelihood of exploitation. The flaw is not listed in the CISA KEV catalog. Attacks can be initiated remotely, but require a high level of complexity and the precise timing of simultaneous requests to trigger the race condition, making exploitation difficult.