Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Jowilf
Jowilf vulnerabilities
Products
Starlette-admin
2
Newest
jowilf
starlette-admin
starlette-admin 0.16.1 through 0.17.1 Searchable Fields Allowlist Bypass
CVE-2026-89267
5.3
Medium
September 12, 2026
jowilf
starlette-admin
Starlette-Admin: Unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS
CVE-2026-54553
Fix available
5.4
Medium
August 26, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open