Encode Starlette vulnerabilities

• encode starlette Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS CVE-2026-54283 Fix available 7.5 HighJune 15, 2026
• encode starlette Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname CVE-2026-54282 Fix available 3.7 LowJune 15, 2026
• encode starlette, red hat exploit intelligence, migration toolkit for applications 8 +8 more +10 more Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows CVE-2026-48818 Fix available 7.5 HighJune 15, 2026
• encode starlette Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` CVE-2026-48817 Fix available 5.3 MediumJune 15, 2026
• encode starlette, red hat exploit intelligence, openshift lightspeed +18 more +20 more Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks CVE-2026-48710 In KEVPublic exploitFix available EPSS 70.3% 6.5 MediumMay 22, 2026
• encode starlette Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse CVE-2025-62727 Public exploitFix available 7.5 HighOctober 28, 2025
• encode starlette Starlette has possible denial-of-service vector when parsing large files in multipart forms CVE-2025-54121 Fix available 5.3 MediumJuly 21, 2025
• encode starlette Starlette Denial of service (DoS) via multipart/form-data CVE-2024-47874 Fix available 8.7 HighOctober 15, 2024
• fastapiexpert python-multipart, encode starlette, tiangolo fastapi +2 more python-multipart vulnerable to content-type header Regular expression Denial of Service CVE-2024-24762 Fix available 7.5 HighFebruary 5, 2024
• encode starlette Starlette has Path Traversal vulnerability in StaticFiles CVE-2023-29159 Fix available 7.5 HighMay 17, 2023
• encode starlette MultipartParser DOS with too many fields or files in Starlette Framework CVE-2023-30798 Fix available 7.5 HighFebruary 14, 2023