Where
-Infinity
0

Trending

Last week
Last month
Last year

Versions

0.4.1
1
0.8.3
1

pip/starletteStarlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS

Risk 43
Severity
7.5
First published (updated )
CVE-2026-54283

pip/StarletteStarlette: Unvalidated request path concatenated into authority poisons request.url.hostname

Risk 27
Severity
5.3
First published (updated )
CVE-2026-54282

pip/starletteStarlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows

Risk 43
Severity
7.5
First published (updated )
CVE-2026-48818

pip/starletteStarlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`

Risk 27
Severity
5.3
First published (updated )
CVE-2026-48817

IBM Engineering AI HubStarlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

Risk 43
Severity
6.5
First published (updated )
CVE-2026-48710
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Fastapiexpert Python-multipart Pythonpython-multipart vulnerable to content-type header Regular expression Denial of Service

Risk 31
Severity
7.5
EPSS
0.12%
First published (updated )
CVE-2024-24762

IBM Cloud Pak for Business AutomationMultipartParser DOS with too many fields or files in Starlette Framework

Risk 45
Severity
7.5
First published (updated )
CVE-2023-30798

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203