Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Jowilf
Starlette-admin
Jowilf Starlette-admin vulnerabilities
jowilf
starlette-admin
starlette-admin 0.16.1 through 0.17.1 Searchable Fields Allowlist Bypass
CVE-2026-89267
5.3
Medium
September 12, 2026
jowilf
starlette-admin
Starlette-Admin: Unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS
CVE-2026-54553
Fix available
5.4
Medium
August 26, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open