Known vulnerabilities in starlette

Vendor: Encode
Software: starlette
Software CPE: cpe:2.3:a:encode:starlette:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting starlette starlette is affected by 13 known vulnerabilities: 10 medium, 3 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132267 - Server-Side Request Forgery (SSRF)
CVE-2026-48818
CWE-918 Medium
No
No
1.1.0 25.05.2026 SB2026052533
#VU132266 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-48817
CWE-470 Medium
No
No
1.1.0 25.05.2026 SB2026052533
#VU132131 - Improper input validation
CVE-2026-48710
CWE-20 Medium
No
No
1.0.1 22.05.2026 SB2026052254
SB20260528275
SB2026052902
and 1 more
#VU117790 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-62727
CWE-835 Medium
No
No
0.49.1 29.10.2025 SB2025102946
SB2025102949
SB2025102950
and 11 more
#VU116147 - Allocation of Resources Without Limits or Throttling
CVE-2025-54121
CWE-770 Medium
No
No
0.47.2 26.09.2025 SB2025092681
SB2025092682
SB2025092683
and 4 more
#VU113078 - Improper input validation
CWE-20 Medium
Available
No
0.47.2 21.07.2025 SB2025072112
#VU98820 - Resource exhaustion
CVE-2024-47874
CWE-400 Medium
No
No
0.40.0 18.10.2024 SB2024101827
SB2024101835
SB2024101837
and 8 more
#VU76618 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-29159
CWE-22 Low
No
No
0.27.0 30.05.2023 SB2023053013
SB2024020228
SB2024022012
and 2 more
#VU76390 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
0.27.0 19.05.2023 SB2023051952
#VU132129 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
0.27.0 16.05.2023 SB2023053013
#VU75607 - Resource exhaustion
CVE-2023-30798
CWE-400 Medium
No
No
0.25.0 01.05.2023 SB2023050119
SB2023060836
SB2023021442
#VU132130 - Resource exhaustion
CWE-400 Medium
No
No
0.25.0 14.02.2023 SB2023021442
#VU31896 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
0.13.5 27.07.2020 SB2020072738