Encode vulnerabilities

Products

• Starlette 11
• Django-rest-framework 5
• Uvicorn 2

Newest

• encode django-rest-framework Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation CVE-2026-114138 Fix available 7.5 HighOctober 21, 2026
• encode django-rest-framework Django REST framework: TokenProxy.delete() reports success and revokes nothing CVE-2026-114137 Fix available 7.4 HighOctober 21, 2026
• encode django-rest-framework Django REST framework: JSONParser applies an attacker-named codec to the request stream CVE-2026-114136 Fix available 7.5 HighOctober 21, 2026
• encode django-rest-framework Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests CVE-2026-73229 Fix available 4.3 MediumAugust 11, 2026
• encode django-rest-framework Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data` CVE-2026-73228 Fix available 5.3 MediumAugust 11, 2026
• encode starlette Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS CVE-2026-54283 Fix available 7.5 HighJune 15, 2026
• encode starlette Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname CVE-2026-54282 Fix available 3.7 LowJune 15, 2026
• encode starlette, red hat exploit intelligence, migration toolkit for applications 8 +8 more +10 more Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows CVE-2026-48818 Fix available 7.5 HighJune 15, 2026
• encode starlette Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` CVE-2026-48817 Fix available 5.3 MediumJune 15, 2026
• encode starlette, red hat exploit intelligence, openshift lightspeed +18 more +20 more Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks CVE-2026-48710 In KEVPublic exploitFix available EPSS 70.3% 6.5 MediumMay 22, 2026
• encode starlette Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse CVE-2025-62727 Public exploitFix available 7.5 HighOctober 28, 2025
• encode starlette Starlette has possible denial-of-service vector when parsing large files in multipart forms CVE-2025-54121 Fix available 5.3 MediumJuly 21, 2025
• encode starlette Starlette Denial of service (DoS) via multipart/form-data CVE-2024-47874 Fix available 8.7 HighOctober 15, 2024
• fastapiexpert python-multipart, encode starlette, tiangolo fastapi +2 more python-multipart vulnerable to content-type header Regular expression Denial of Service CVE-2024-24762 Fix available 7.5 HighFebruary 5, 2024
• encode starlette Starlette has Path Traversal vulnerability in StaticFiles CVE-2023-29159 Fix available 7.5 HighMay 17, 2023
• encode starlette MultipartParser DOS with too many fields or files in Starlette Framework CVE-2023-30798 Fix available 7.5 HighFebruary 14, 2023
• encode httpx Improper Input Validation in httpx CVE-2021-41945 Fix available 9.1 CriticalApril 28, 2022
• encode django rest framework, debian linux, redhat ceph storage +2 more Cross-site Scripting (XSS) in Django REST Framework CVE-2020-25626 Fix available 6.1 MediumSeptember 30, 2020
• encode uvicorn HTTP Response Splitting CVE-2020-7695 Fix available 5.3 MediumJuly 27, 2020
• encode uvicorn Log Injection CVE-2020-7694 Fix available 3.7 LowJuly 27, 2020